12573 matches found
CVE-2024-34751
CVE-2024-34751 is a vulnerability in the WordPress plugin “Order Export & Order Import for WooCommerce” (affected: versions up to and including 2.4.9). The issue is a deserialization of untrusted data leading to an authenticated PHP Object Injection, requiring Administrator+ privileges to exploit...
CVE-2024-34751: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9...
WordPress Plugin: Order Export & Order Import for WooCommerce – Code Issues and Vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2024-26158
Name of the Vulnerable Software and Affected Versions WebToffee Order Export & Order Import for WooCommerce versions n/a through 2.4.9 Description The issue is related to Deserialization of Untrusted Data, which affects the WebToffee Order Export & Order Import for WooCommerce plugin. This could...
PVS export wizard reports "No Devices Found to Export"
Unable to add PVS provisioned machines to Studio Machine Catalogs. When using the Export Devices Wizard, users receive the error "No Devices Found to Export". Issue remains even after deleting and recreating the AD computer objects...
CVE-2024-4734: Improper Neutralization of Input During Web Page Generation
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.26.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin: Security vulnerabilities in user and customer import/export functionality
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Import...
PT-2024-32042 · WordPress · Import/Export Users/Customers Plugin For Wordpress
Name of the Vulnerable Software and Affected Versions: Import and export users and customers plugin for WordPress versions up to, and including, 1.26.6.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with administrator...
Imported Citrix Policy lists Delivery Group names from source site in the policy filter
If Citrix Policies are exported from a site and imported to a different site, the export caries Delivery Groups from source site in Assign Policy filter. Command to export & import policy Export-BrokerDesktopPolicy | Out-File -FilePath C:\Temp\PolicyExport.txt Import-BrokerDesktopPolicy Get-Conte...
PT-2024-32554
Name of the Vulnerable Software and Affected Versions Import and export users and customers plugin for WordPress versions up to, and including, 1.26.6.1 Description The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping...
CVE-2024-4656: Improper Neutralization of Input During Web Page Generation
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user agent header in all versions up to, and including, 1.26.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Trình Vũ / Sonicrrrr from VNPT-VCI Patchstack Alliance in WordPress Plugin Order Export & Order Import for WooCommerce versions = 2.4.9...
WordPress Import and export users and customers plugin <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by quanhx hxx in WordPress Plugin Import and export users and customers versions = 1.26.6.1...
WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.9 is vulnerable to PHP Object Injection
Software Order Export & Order Import for WooCommerce Type Plugin Vulnerable versions = 2.4.9 Fixed in 2.5.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-34751 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID 6a894e737867 Credits Trình Vũ...
Apple iOS and iPadOS security vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. An attacker could exploit this vulnerability to expor...
J2EEFAST export function SQL injection vulnerability
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the export function of the sqlfilte...
WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Import and export users and customers versions = 1.26.5...
WordPress Import and export users and customers Plugin <= 1.26.5 is vulnerable to Broken Access Control
Software Import and export users and customers Type Plugin Vulnerable versions = 1.26.5 Fixed in 1.26.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34815 Patch priority Low CVSS severity Low 5.4 Developer Codection PSID 57826da19f4c Credits emad Requir...
Gitlab -- vulnerabilities
Gitlab reports: ReDoS in branch search when using wildcards ReDoS in markdown render pipeline Redos on Discord integrations Redos on Google Chat Integration Denial of Service Attack via Pin Menu DoS by filtering tags and branches via the API MR approval via CSRF in SAML SSO Banned user from group...
