CVE-2023-4242

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about...

Denial Of Service (DoS)

Yarp.ReverseProxy is vulnerable to denial of service. The vulnerability exists due to the attribute request failure before determining a destination's health in the RequestProxied function of TransportFailureRateHealthPolicy.cs, allowing an attacker to cause an application crash...