PT-2019-7481

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7482

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

PT-2019-7478

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD PDF Stamper extension for WordPress versions 1.8.x through 1.8.6 Easy Digital Downloads EDD PDF Stamper extension for WordPress versions 1.9.x through 1.9.9 Easy Digital Downloads EDD PDF Stamper extension for...

PT-2019-7479

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads EDD Per Product Emails extension for WordPress versions 1.8.x through 1.8.6 Easy Digital Downloads EDD Per Product Emails extension for WordPress versions 1.9.x through 1.9.9 Easy Digital Downloads EDD Per Product Emails...

UBUNTU-CVE-2019-17626

ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document with 'span color="' followed by arbitrary Python code...

PT-2019-7335

Name of the Vulnerable Software and Affected Versions iThemes Mobile version 1.2.7 and earlier Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For iThemes Mobile version 1.2.7 and earlier, update to versio...

PT-2019-7327

Name of the Vulnerable Software and Affected Versions iThemes Exchange Easy EU Value Added VAT Taxes Add-on for WordPress version prior to 1.2.0 Description The issue concerns a problem with the Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before version 1.2.0 for WordPress. It...

PT-2019-7319

Name of the Vulnerable Software and Affected Versions UpdraftPlus plugin versions prior to 1.9.64 Description The issue concerns a problem with the UpdraftPlus plugin for WordPress, where there is a potential for XSS Cross-Site Scripting attacks. This is due to the misuse of the add query arg and...

PT-2019-7337

Name of the Vulnerable Software and Affected Versions iThemes Builder Theme Market versions prior to 5.1.27 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 5.1.27, update to version 5.1.27...

PT-2019-7331

Name of the Vulnerable Software and Affected Versions Membership Add-on for iThemes Exchange versions prior to 1.3.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.3.0, update to versio...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

PT-2019-7321

Name of the Vulnerable Software and Affected Versions Post Connector plugin versions prior to 1.0.4 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For Post Connector plugin versions prior to 1.0.4, update to...

PT-2019-7320

Name of the Vulnerable Software and Affected Versions Related Posts plugin versions prior to 1.8.2 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.8.2, update to version 1.8.2 or later t...

PT-2019-7317

Name of the Vulnerable Software and Affected Versions feedwordpress plugin versions prior to 2015.0514 Description The issue concerns a cross-site scripting XSS problem. It is related to the use of add query arg and remove query arg functions. Recommendations For versions prior to 2015.0514, upda...

PT-2019-7318

Name of the Vulnerable Software and Affected Versions Jetpack plugin for WordPress versions prior to 3.4.3 Description The issue concerns a problem with the Jetpack plugin for WordPress, where there is a potential for XSS Cross-Site Scripting attacks. This is due to the improper use of the add...

PT-2019-7332

Name of the Vulnerable Software and Affected Versions iThemes Exchange PayPal Pro Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update ...

PT-2019-7338

Name of the Vulnerable Software and Affected Versions iThemes Builder Style Manager versions prior to 0.7.7 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 0.7.7, update to version 0.7.7 o...

PT-2019-7324

Name of the Vulnerable Software and Affected Versions iThemes Exchange Authorize.net Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, upda...

PT-2019-7323

Name of the Vulnerable Software and Affected Versions 2Checkout Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, update to versi...

PT-2019-7334

Name of the Vulnerable Software and Affected Versions Table Rate Shipping Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem where an attacker can exploit the add query arg and remove query arg functions to perform a cross-site scripting XSS attack...