USN-5321-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, obtain sensitive information, or execute arbitrary...

USN-5321-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, obtain sensitive information, or execute arbitrary...

Mozilla: Time-of-check time-of-use bug when verifying add-on signatures

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified, and Firefox...

Mozilla: Time-of-check time-of-use bug when verifying add-on signatures

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified, and Firefox...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to a TOCTOU allowing an attacker to crash the system with an invalid signature when installing an addon...

WordPress Education Addon for Elementor plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Education Addon for Elementor plugin versions = 1.1. Solution Update the WordPress Education Addon for Elementor plugin to the latest available version at least 1.2...

WordPress Restaurant & Cafe Addon for Elementor plugin < 1.4.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Restaurant & Cafe Addon for Elementor plugin versions 1.4.6. Solution Update the WordPress Restaurant & Cafe Addon for Elementor plugin to the latest available version at least 1.4.6...

WordPress Elementor Addon Elements plugin < 1.11.14 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Elementor Addon Elements plugin versions 1.11.14. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.14...

WordPress Sales Page Addon – Elementor & Beaver Builder plugin < 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Sales Page Addon – Elementor & Beaver Builder plugin versions 1.3. Solution Update the WordPress Sales Page Addon – Elementor & Beaver Builder plugin to the latest available version at least 1.3...

WordPress Booking Addon for WooCommerce plugin <= 4.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Booking Addon for WooCommerce plugin versions = 4.1.0. Solution Update the WordPress Booking Addon for WooCommerce plugin to the latest available version at least 4.2.0...

WordPress Restaurant & Cafe Addon for Elementor plugin < 1.4.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Restaurant & Cafe Addon for Elementor plugin versions 1.4.6. Solution Update the WordPress Restaurant & Cafe Addon for Elementor plugin to the latest available version at least 1.4.6...

WordPress Booking Addon for WooCommerce plugin <= 4.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Booking Addon for WooCommerce plugin versions = 4.1.0. Solution Update the WordPress Booking Addon for WooCommerce plugin to the latest available version at least 4.2.0...

WordPress Sales Page Addon – Elementor & Beaver Builder plugin < 1.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Sales Page Addon – Elementor & Beaver Builder plugin versions 1.3. Solution Update the WordPress Sales Page Addon – Elementor & Beaver Builder plugin to the latest available version at least 1.3...

WordPress WooCommerce SEO Content Randomizer Addon plugin <= 1.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce SEO Content Randomizer Addon plugin versions = 1.2.0. Solution Update the WordPress WooCommerce SEO Content Randomizer Addon plugin to the latest available version at least 1.2.2...

WordPress Elementor Addon Elements plugin < 1.11.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elementor Addon Elements plugin versions 1.11.14. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.14...

WordPress eCommerce Addon plugin < 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress eCommerce Addon plugin versions 1.3. Solution Update the WordPress eCommerce Addon plugin to the latest available version at least 1.3...

WordPress WooCommerce SEO Content Randomizer Addon plugin <= 1.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce SEO Content Randomizer Addon plugin versions = 1.2.0. Solution Update the WordPress WooCommerce SEO Content Randomizer Addon plugin to the latest available version at least 1.2.2...

WordPress Education Addon for Elementor plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Education Addon for Elementor plugin versions = 1.1. Solution Update the WordPress Education Addon for Elementor plugin to the latest available version at least 1.2...

WordPress eCommerce Addon plugin < 1.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress eCommerce Addon plugin versions 1.3. Solution Update the WordPress eCommerce Addon plugin to the latest available version at least 1.3...

Master Addons for Elementor < 1.8.2 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting " name="errormessage"...