PT-2023-24103 · WordPress · Hastheme Wishsuite – Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: HasTheme WishSuite – Wishlist for WooCommerce plugin versions = 1.3.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the...

PT-2023-21908 · WordPress · Kevon Adonis Wp Abstracts

Name of the Vulnerable Software and Affected Versions: Kevon Adonis WP Abstracts plugin versions = 2.6.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 2.6.3, update to a...

PT-2023-21260 · Unknown · Mrdemonwolf Livestream Notice

Name of the Vulnerable Software and Affected Versions: MrDemonWolf Livestream Notice plugin versions 1.2.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the MrDemonWo...

PT-2023-24845 · Didier Sampaolo · Spamreferrerblock

Name of the Vulnerable Software and Affected Versions: Didier Sampaolo SpamReferrerBlock plugin versions = 2.22 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Didier Sampaolo SpamReferrerBlock plugin. This vulnerability requires authenticatio...

PT-2023-24219 · Unknown · Gsmith Cookie Monster

Name of the Vulnerable Software and Affected Versions: gsmith Cookie Monster plugin versions = 1.51 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts into the application, which can then be...

PT-2023-20080 · WordPress · Wp Htaccess Control

Name of the Vulnerable Software and Affected Versions: WP htaccess Control plugin versions = 3.5.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the WP htaccess Control plugin. This vulnerability requires authentication with admin+ privileges...

PT-2023-19563 · WordPress · Davidsword Mobile Call Now & Map Buttons

Name of the Vulnerable Software and Affected Versions: Davidsword Mobile Call Now & Map Buttons plugin versions 1.5.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects th...

PT-2023-21703 · WordPress · Xootix Side Cart Woocommerce

Name of the Vulnerable Software and Affected Versions: XootiX Side Cart Woocommerce Ajax plugin versions prior to 2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 2....

PT-2023-23896 · Cloud Primero B.V · Dbargain Plugin

Name of the Vulnerable Software and Affected Versions: Cloud Primero B.V DBargain plugin versions = 3.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Cloud Primero B.V DBargain plugi...

PT-2023-23899 · Palasthotel · Sunny Search

Name of the Vulnerable Software and Affected Versions: Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin versions 1.0.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges...

CVE-2023-3955

A vulnerability was found in Kubernetes. This flaw allows a user who can create pods on Windows nodes to escalate to admin privileges on those nodes...

PT-2023-23831 · WordPress · Supersoju Block Referer Spam

Name of the Vulnerable Software and Affected Versions: Supersoju Block Referer Spam plugin versions 1.1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Supersoj...

PT-2023-23832 · Ays · Easy Form

Name of the Vulnerable Software and Affected Versions: Easy Form team Easy Form by AYS plugin versions 1.2.0 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.2.0 an...

PT-2023-23830 · WordPress · Bill Minozzi Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection

Name of the Vulnerable Software and Affected Versions: Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin versions prior to 7.32 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Bill Minozzi Block...

PT-2023-4576 · Unknown +2 · Kubernetes +1

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only...

PT-2023-23839 · WordPress · Arshid Easy Hide Login

Name of the Vulnerable Software and Affected Versions: Arshid Easy Hide Login plugin versions = 1.0.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 1.0.7, update to a versio...

PT-2023-21907 · Marco Steinbrecher · Wp Browserupdate

Name of the Vulnerable Software and Affected Versions: Marco Steinbrecher WP BrowserUpdate plugin versions = 4.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts int...

PT-2023-23147 · WordPress · Pradeep Singh Dynamically Register Sidebars

Name of the Vulnerable Software and Affected Versions: Pradeep Singh Dynamically Register Sidebars plugin versions 1.0.1 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Prade...

CVE-2023-2802

The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisi...

CVE-2023-3259

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...