CVE-2024-38760 WordPress Send Users Email plugin <= 1.5.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Maucher Send Users Email allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Send Users Email: from n/a through 1.5.1...

CVE-2024-38756 WordPress Coming Soon Page – Responsive Coming Soon & Maintenance Mode plugin <= 1.6.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3...

CVE-2024-38749 WordPress Olive One Click Demo Import plugin <= 1.1.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2...

CVE-2024-38747 WordPress HitPay Payment Gateway for WooCommerce plugin <= 4.1.3 - Sensitive Data Exposure via Log File vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HitPay Payment Solutions Pte Ltd HitPay Payment Gateway for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects HitPay Payment Gateway for WooCommerce: from n/a through 4.1.3...

CVE-2024-38747

CVE-2024-38747 relates to HitPay Payment Gateway for WooCommerce. The vulnerability allows exposure of sensitive information due to functionality not properly constrained by ACLs, effectively exposing data via log files. Affected plugin versions are from n/a up to and including 4.1.3. The primary...

CVE-2024-38742

CVE-2024-38742: WordPress plugin MBE eShip (MBE eShip) is affected (versions up to 2.1.2; affected range n/a–2.1.2) by an information disclosure vulnerability where Access Control Lists (ACLs) do not properly constrain functionality, potentially exposing sensitive data to unauthorized actors. CVS...

CVE-2024-38688

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-38699 WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13...

CVE-2024-38699 WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13...

CVE-2024-38688

CVE-2024-38688 is rejected/withdrawn; this CVE ID does not represent an active vulnerability.

CVE-2024-38688

...

CVE-2024-37935

The CVE-2024-37935 entry concerns a Missing Authorization vulnerability in the Anhvnit Woocommerce OpenPos WordPress plugin. It allows accessing functionality that is not constrained by ACLs, effectively enabling unauthorized access to certain features. Affected software: Woocommerce OpenPos vers...

CVE-2024-37935 WordPress Woocommerce OpenPos plugin <= 6.4.4 - Unauthenticated Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woocommerce OpenPos: from n/a through 6.4.4...

PT-2024-28191

Name of the Vulnerable Software and Affected Versions HitPay Payment Gateway for WooCommerce versions n/a through 4.1.3 Description The issue affects the HitPay Payment Gateway for WooCommerce, allowing unauthorized access to sensitive information due to improperly constrained functionality by...

CVE-2024-38742: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2...

CVE-2024-43131: Incorrect Authorization

Incorrect Authorization vulnerability in WPWeb Docket WooCommerce Collections / Wishlist / Watchlist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

CVE-2024-38756: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3...

CVE-2024-38699: Missing Authorization

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13...

CVE-2024-37930

CVE-2024-37930 affects ThemeSphere SmartMag WordPress theme (SmartMag: vulnerable from n/a up to, but not including, 10.1.0). The issue is an Insertion of Sensitive Information into Log File, per Red Hat’s entry for CVE-2024-37930, which lists SmartMag as affected and

K000140528: BIND vulnerability CVE-2024-0760

Security Advisory Description A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions...