WordPress Kaswara Modern WPBakery Page Builder 3.0.1 File Upload Vulnerability

WordPress Kaswara Modern WPBakery Page Builder plugin versions 3.0.1 and below suffer from an arbitrary file upload vulnerability. Description: Arbitrary File Upload/Deletion and Other Affected Plugin: Kaswara Modern WPBakery Page Builder Addons Plugin Slug: kaswara Affected Versions: = 3.0.1 CVE...

WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

Unauthenticated Arbitrary Option Update vulnerability discovered by m0ze Patchstack in WordPress Shortcode Addons plugin versions = 3.0.2. Solution Update the WordPress Shortcode Addons plugin to the latest available version at least 3.0.3...

VulnCheck KEV: CVE-2022-34487

Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin = 3.0.2 at WordPress...

Malicious code in addons-code-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf419ee2b522079bd06dfa8eb6b6da75b7689d383e7942157adbc220bed5a2df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-854 Malicious code in addons-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8eeb05885cbcc11dc67ed4c591f886c206aed2cbe61ca13708cb616e7a1cf95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-853 Malicious code in addons-code-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf419ee2b522079bd06dfa8eb6b6da75b7689d383e7942157adbc220bed5a2df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in addons-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8eeb05885cbcc11dc67ed4c591f886c206aed2cbe61ca13708cb616e7a1cf95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-addons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38370edb6fbce6929600fff8136e219887d82baaa900c76803da5b82622a8b78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4869 Malicious code in noblox.js-addons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38370edb6fbce6929600fff8136e219887d82baaa900c76803da5b82622a8b78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6184 Malicious code in sn-seismic-addons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c65ded5619490b98552abae28dfb57a7838397e7094e3f7e9ecc35e215b4f2c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sn-seismic-addons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c65ded5619490b98552abae28dfb57a7838397e7094e3f7e9ecc35e215b4f2c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mageia: Security Advisory (MGASA-2022-0229)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2022-0212)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service DOS issue was found in the Linux kernel smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser...

Mageia: Security Advisory (MGASA-2022-0121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-0327

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scriptin...

CVE-2022-0327 Master Addons for Elementor < 1.8.2 - Reflected Cross-Site Scripting

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the errormessage parameter before outputting it back in the response of the jltmarestrictcontent AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scriptin...

CVE-2022-0327

CVE-2022-0327 concerns the WordPress plugin Master Addons for Elementor (before 1.8.5). The flaw arises because the plugin does not sanitize/escape the error_message parameter when returning it in the response to the jltma_restrict_content AJAX action, which is accessible to both unauthenticated ...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Master Addons for Elementor plugin versions prior to 1.8.5 contain a cross-site scripting vulnerability that stems from the plugin's...

Mageia: Security Advisory (MGASA-2022-0092)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...