WordPress plugin AI Quiz | Quiz Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Online Booking & Scheduling Calendar for WordPress by vcita 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes

A flaw was found in PostgreSQL. This vulnerability allows incorrect row-level security policies to be applied via subqueries, WITH queries, security invoker views, or SQL-language functions that reference tables with row-level security policies. This issue arises when a query is planned under one...

CVE-2024-10567

CVE-2024-10567 affects the TI WooCommerce Wishlist WordPress plugin (versions up to 2.9.1). The issue is a missing capability check in the wizard function, enabling unauthenticated attackers to create new pages, modify plugin settings, and perform limited options updates. The vulnerability is doc...

CVE-2024-10664

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

CVE-2024-10664

CVE-2024-10664 – BasePress Docs (Knowledge Base documentation & wiki plugin) for WordPress is affected by a missing authorization check in basepress_db_posts_update(), enabling data modification by authenticated users with Subscriber-level access and above, across all versions up to 2.16.3.3. Pub...

CVE-2024-10663

CVE-2024-10663 concerns Eleblog – Elementor Blog And Magazine Addons for WordPress (versions up to 1.8). A missing capability check in goodbye_form_callback() enables unauthenticated? no, this requires authenticated Subscriber+ access to modify data by submitting a deactivation reason. The CVE no...

WordPress plugin BasePress Docs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-16439 · WordPress · Eleblog

Name of the Vulnerable Software and Affected Versions: Eleblog – Elementor Blog And Magazine Addons plugin for WordPress versions up to, and including, 1.8 Description: The issue is related to a missing capability check on the goodbye form callback function, allowing authenticated attackers with...

WordPress plugin TI WooCommerce Wishlist 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-51773

A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting XSS attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized t...

CVE-2024-51773

CVE-2024-51773 affects Hewlett Packard Enterprise Aruba ClearPass Policy Manager web-based management interface. A stored XSS vulnerability allows an authenticated remote attacker to perform actions within the user’s permissions, potentially accessing data, modifying or deleting information, and ...

CVE-2024-11844

The CVE-2024-11844 entry concerns the IdeaPush WordPress plugin (versions up to and including 8.71). Root cause: missing capability check in the idea_push_taxonomy_save_routine allows authenticated users with Subscriber-level access or higher to delete terms in the boards taxonomy, effectively en...

PT-2024-16370 · WordPress · Ti Woocommerce Wishlist

Name of the Vulnerable Software and Affected Versions: TI WooCommerce Wishlist plugin for WordPress versions prior to 2.9.2 Description: The issue concerns a missing capability check in the wizard function, allowing unauthenticated attackers to create new pages, modify plugin settings, and perfor...

PT-2024-33532 · Google · Android 12 +2

Name of the Vulnerable Software and Affected Versions: Quick Share Agent versions prior to 3.5.14.47 in Android 12 Quick Share Agent versions prior to 3.5.19.41 in Android 13 Quick Share Agent versions prior to 3.5.19.42 in Android 14 Description: The issue allows adjacent attackers to write file...

PT-2024-17291 · WordPress · Ideapush

Name of the Vulnerable Software and Affected Versions: IdeaPush plugin for WordPress versions up to, and including, 8.71 Description: The issue concerns a lack of capability check in the idea push taxonomy save routine function, allowing authenticated attackers with Subscriber-level access and...

K000148689: Qt vulnerability CVE-2023-32762

Security Advisory Description An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established, even when explicitly prohibited by the...

CVE-2024-11856

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification...

CVE-2024-11856 HPE IceWall Products, Remote Unauthorized Data Modification

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification...

CVE-2024-11856

CVE-2024-11856 affects HPE IceWall products, with a remote attack vector that can cause Unauthorized Data Modification. The CVSSv3.1 metrics indicate Network attack vector, high attack complexity, no privileges required, no user interaction, resulting in no confidentiality impact, a low integrity...