WordPress Elements kit Elementor addons Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.7 Fixed in 3.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2803 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 88e697466103 Credits Webbernaut Required...

bgpattrpsid_sub Heap Buffer Overflow DoS

The vulnerability of the bgpattrpsidsub function in the networking routing implementation software for Unix-like systems in FRRouting is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to cause service failures remote...

CVE-2024-27972

Improper Control of Generation of Code 'Code Injection' vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.This issue affects WP Fusion Lite: from n/a through = 3.41.24...

CVE-2024-26682 wifi: mac80211: improve CSA/ECSA connection refusal

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using that to not attempt to connect while CSA is...

PT-2024-21460

Name of the Vulnerable Software and Affected Versions Linux kernel versions = 6.7.4 Description The issue is related to the wifi mac80211 component in the Linux kernel, where some access points APs have ECSA elements stuck in their probe response. This causes the kernel to not attempt to connect...

PT-2024-3798 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 124 Description: The issue is related to the browser's handling of insecure elements added to a page after a delay, which could lead to a mixed content security status not being properly indicated. This could...

ROS-20240402-10

A vulnerability in the NetScreen file parser of Wireshark, a computer network traffic analyzer, is related to an operation exceeding buffer boundaries. operation out of buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerabilit...

Splunk Enterprise Command Injection

The vulnerability of the Splunk Enterprise platform for operational analysis stems from the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploitation of this vulnerability can allow a malicious actor to influence the confidentiality and integri...

Ruijie RG-EG Router Arbitrary Command Execution

The vulnerability of the setAction function /itbox.pi.networksafe.php?a=set in the Ruijie RG-EG series of router microprogramming systems is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote...

QuMagie Command Injection

The vulnerability of the QuMagie multimedia file storage application for QNAP NAS exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2024-31099 WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...

CVE-2024-31099 WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...

WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Elements kit Elementor addons versions = 3.0.6...

WordPress Unlimited Elements For Elementor plugin <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Widget Link vulnerability discovered by Webbernaut in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.96...

PT-2024-23767

Name of the Vulnerable Software and Affected Versions Shortcodes and extra features for Phlox theme versions 2.15.7 and earlier Description The issue is related to a Missing Authorization vulnerability in the Averta Shortcodes and extra features for Phlox theme. This vulnerability affects the...

CVE-2024-31099: Missing Authorization

Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7...

Unlimited Elements For Elementor < 1.5.97 - Contributor+ Stored XSS

Description The plugin is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level acce...

WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1238 Patch priority Low CVSS severity Low 6.5 Developer Wpmet PSID 8734102af007 Credits wesley wcraft Requir...

CVE-2024-30489

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...

CVE-2024-0367

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget e.g., 'Button Link' in all versions up to, and including, 1.5.96 due to insufficient input sanitization and output escaping on user supplied attributes...