CVE-2023-45046 WordPress Pressference Exporter Plugin <= 1.0.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pressference Pressference Exporter allows SQL Injection.This issue affects Pressference Exporter: from n/a through 1.0.3...

PT-2023-30237 · Visser · Visser Labs Store Exporter For Woocommerce

Name of the Vulnerable Software and Affected Versions: Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin versions = 2.7.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting vulnerability. This vulnerabili...

PT-2023-29365 · Unknown · Pressference Exporter

Name of the Vulnerable Software and Affected Versions: Pressference Exporter versions 1.0.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress Plugin Store Exporter for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Plugin Pressference Exporter SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce – Store Exporter Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46822 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e0dcf0ba69c0 Credits Muhammad Daffa...

The vulnerability of the Store Exporter plugin for WooCommerce in the WordPress content management system arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Store Exporter plugin for WooCommerce in the WordPress content management system is related to the failure to remove special elements during the processing of the woo-ce admin page. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, vault-csi-provider, dgraph, kube-oidc-proxy, metrics-server-fips, kubernetes-csi-livenessprobe, falcoctl-fips, kubeflow-fips, buildkitd, src, cortex, k3d, kubevela, slsa-verifier, dynamic-localpv-provisioner-fips, kubeflow,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, kubeflow, spark-operator, kubevela, cortex, terraform-provider-sendgrid, aactl, dgraph, up, scorecard, buildkitd, kubescape, src, k3d...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: hey, kube-oidc-proxy, metrics-server-fips, gobuster, configmap-reload-fips, pulumi-language-yaml, src, k3d, aws-load-balancer-controller, dive, bom, gke-gcloud-auth-plugin, metrics-server, kubeflow, frp, kubernetes-csi-livenessprobe-fips, prometheus-pushgateway-fips,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: thanos-operator, dynamic-localpv-provisioner, cue, kubewatch, pulumi-language-dotnet, aws-load-balancer-controller, gitness, hugo, yq, oauth2-proxy, aactl, buildkitd, kubernetes-dashboard-metrics-scraper, kubescape, ollama, cosign, metacontroller, atlantis,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: hey, kube-oidc-proxy, metrics-server-fips, gobuster, configmap-reload-fips, pulumi-language-yaml, src, k3d, aws-load-balancer-controller, dive, bom, gke-gcloud-auth-plugin, metrics-server, kubeflow, frp, kubernetes-csi-livenessprobe-fips, prometheus-pushgateway-fips,...

GHSA-XPW8-RCWV-8F8P vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, trino, wavefront-proxy...

GHSA-XPW8-RCWV-8F8P vulnerabilities

Vulnerabilities for packages: trino, wavefront-proxy, cloudwatch-exporter...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cue, kubewatch, pulumi-language-dotnet, envoy-ratelimit, nginx-stable, gitness, hugo, oauth2-proxy, aactl, buildkitd, kubescape, ollama, cosign, metacontroller, atlantis, newrelic-infrastructure-agent, nodetaint, rqlite, pulumi, amass,...

WordPress Pressference Exporter Plugin <= 1.0.3 is vulnerable to SQL Injection

Software Pressference Exporter Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-45046 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 80cf03614798 Credits Nithissh S Required privilege Administrator...

WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure

Software WP Ultimate Exporter Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2487 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID b22ef0e23a4e Credits Jonas Höbenreic...

SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3867-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3867-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501...

openSUSE 15: golang-github-QubitProducts-exporter_exporter / etc (SUSE-SU-2023:3868-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3868-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix...

SUSE-EL-9-CLIENT-TOOLS-2023-3875 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...