CVE-2015-9329: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS...

PT-2019-7288

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.5 Description The issue is related to reflected XSS in the wp-all-import plugin for WordPress. Recommendations For versions prior to 3.2.5, update to version 3.2.5 or later to resolve the issue...

PT-2019-7289

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.5 Description The issue is related to blind SQL injection. Recommendations For versions prior to 3.2.5, update to version 3.2.5 or later to resolve the issue...

PT-2019-7291

Name of the Vulnerable Software and Affected Versions WordPress uninstall plugin versions prior to 1.2 Description The issue allows for CSRF, enabling the deletion of all tables via the "wp-admin/admin-ajax.php?action=uninstall" API endpoint. Recommendations For versions prior to 1.2, update to...

PT-2019-10414

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.4.7 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue...

PT-2019-7290

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.4 Description The issue concerns the lack of prevention for unauthenticated requests to adminInit. This allows unauthorized access, potentially leading to exploitation. Recommendations For versions...

CVE-2017-18567: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

CVE-2018-20978: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.7 for WordPress has XSS...

PT-2019-8501

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.4.6 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 3.4.6, update to version 3.4.6 or later to resolve the issue...

Photo gallery suffers from denial of service vulnerability (CNVD-2019-30301)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

PT-2019-13865

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1 Description The issue allows for Remote Command Execution via shell metacharacters in the host field, located in the module/tool all/ area. Recommendations For EyesOfNetwork version 5.1, consider restricting access to...

ovirt-engine-metrics: disclosure of sensitive passwords in log files and ansible playbooks

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files if playbooks are run with -v or in playbooks stored on Metrics or Bastion hosts...

PT-2019-7684

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.7 Description The issue is related to multiple SQL injection problems. Recommendations For versions prior to 4.0.7, update to version 4.0.7 or later to resolve the issue...

PT-2019-7269

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.1 Description The issue concerns multiple SQL injection problems. Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to resolve the issue...

PT-2019-7683

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.9 Description The issue concerns SQL injection problems. Recommendations For versions prior to 4.0.9, update to version 4.0.9 or later to resolve the issue...

CVE-2015-9310: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues...

CVE-2016-10887: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues...

CVE-2016-10888: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues...

CVE-2016-10867

The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...

PT-2019-7662

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.2.0 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue...