PT-2024-6958 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated...

Privilege Escalation

github.com/rancher/rancher vulnerable to Privilege Escalation. The vulnerability is due to improper restrictions in node driver options, allowing unprivileged users to deploy nodes and post sensitive files such as /root/.kube/config or /var/lib/rancher/management-state/cred/kubeconfig-system.yaml...

PT-2024-31842 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: The issue allows for Arbitrary File Deletion through the file name parameter in an "/admin/database.php?act=del" request. This flaw can be exploited to delete files arbitrarily. Recommendations: For BlueCMS...

CVE-2024-9314

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'setredirections' function. This makes it possible for authenticated attackers, with...

PT-2024-39563 · WordPress · Rank Math Seo

Name of the Vulnerable Software and Affected Versions: Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress versions up to, and including, 1.0.228 Description: The issue is related to PHP Object Injection via deserialization of untrusted input in the set redirections functio...

PT-2024-40013 · Saltcorn · Saltcorn

Name of the Vulnerable Software and Affected Versions: Saltcorn versions 1.0.0 through 1.0.0-beta.13 Description: A user with admin permission can read and download arbitrary zip files when downloading auto backups. The file name used to identify the zip file is not properly sanitized when passed...

CVE-2024-47806

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a1de8 and earlier does not check the aud Audience claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins...

Jenkins Plugin OpenId Connect Authentication 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software plugin. A security vulnerability in...

PT-2024-21052 · Elabftw · Elabftw

Name of the Vulnerable Software and Affected Versions: eLabFTW versions prior to 5.1.0 Description: The issue allows a regular user to become an administrator of a team where they are a member, under a reasonable configuration. In versions subsequent to v5.0.0, it may also allow an initially...

PT-2024-39434 · WordPress · Wechat Social Login Plugin

Name of the Vulnerable Software and Affected Versions: Wechat Social login plugin for WordPress versions up to, and including, 1.3.0 Description: The issue is due to insufficient verification on the user being supplied during the social login, making it possible for unauthenticated attackers to l...

PT-2024-39545 · WordPress · Wordpress & Woocommerce Affiliate Program

Name of the Vulnerable Software and Affected Versions: WordPress & WooCommerce Affiliate Program plugin versions up to, and including, 8.4.1 Description: The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass due to the rtwwwap login request...

CVE-2024-8379

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

PT-2024-32506 · Seiko Epson · Seiko Epson Web Config

Name of the Vulnerable Software and Affected Versions: SEIKO EPSON Web Config affected versions not specified Description: The issue is related to an insecure initial password configuration in SEIKO EPSON Web Config, allowing a remote unauthenticated attacker to set an arbitrary password and...

PT-2024-38983 · WordPress · Cost Calculator Builder

Name of the Vulnerable Software and Affected Versions: Cost Calculator Builder WordPress plugin versions prior to 3.2.29 Description: The issue is related to a SQL injection vulnerability. It occurs because the plugin does not properly sanitise and escape a parameter before using it in a SQL...

PT-2024-38864 · WordPress · Wp Multitasking

Name of the Vulnerable Software and Affected Versions: WP MultiTasking – WP Utilities plugin for WordPress versions up to, and including, 0.1.17 Description: The issue is related to Stored Cross-Site Scripting via the wpmt menu name parameter due to insufficient input sanitization and output...

WordPress Prisna GWT - Google Website Translator plugin <= 1.4.11 - Authenticated (Admin+) PHP Object Injection vulnerability

WordPress Prisna GWT - Google Website Translator plugin = 1.4.11 - Authenticated Admin+ PHP Object Injection vulnerability discovered by Lesor101 in WordPress Plugin Prisna GWT – Google Website Translator versions = 1.4.11...

CVE-2024-8514

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

CVE-2024-8350

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgmmanagement/v1/adduser/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group...

CVE-2024-8350

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgmmanagement/v1/adduser/ REST API endpoint in all versions up to, and including, 6.1.0.1. This makes it possible for authenticated attackers, with group...

CVE-2024-8350

The CVE entries CVE-2024-8350 and CVE-2024-8349 relate to the Uncanny Groups for LearnDash plugin for WordPress. All versions up to 6.1.0.1 are affected by a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint, allowing authenticated attackers with group leader...