EUVD-2023-34625

Malicious code in bioql PyPI...

CVE-2024-28394

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module...

CVE-2024-28394

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module...

CVE-2024-28394

An issue in Advanced Plugins reportsstatistics (v1.3.20 and earlier) allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module . The vulnerability is categorized under CWE-863 (Incorrect Authorization) . To remediate this, users should upd...

PT-2024-22414 · Unknown · Advanced Plugins Reportsstatistics

Name of the Vulnerable Software and Affected Versions: Advanced Plugins reportsstatistics versions 1.3.20 and earlier Description: An issue in Advanced Plugins reportsstatistics allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module...

CVE-2024-28394: Incorrect Authorization

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module...

CVE-2024-28390

The Advanced Plugins ultimateimagetool module for PrestaShop is affected by an Improper Access Control vulnerability in versions prior to v.2.2.01 . This flaw allows a remote attacker to escalate privileges and obtain sensitive information. To remediate this issue, users should update to version ...

CVE-2024-28390: Improper Access Control

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

PT-2023-22583

Name of the Vulnerable Software and Affected Versions Image: WebP, Compress, Zoom, Lazy load, Alt & More ultimateimagetool versions up to 2.1.02 Description The issue allows a guest to download personal information without restriction by performing a path traversal attack. This can be exploited i...

CVE-2023-30200

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...