CVE-2024-13811

CVE-2024-13811 concerns the Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme for WordPress (versions

CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafkaimportlafka' AJAX actions in all versions up to, and including, 4.5.7. This makes it possible for authenticated attacker...

PT-2025-9813

Name of the Vulnerable Software and Affected Versions The Zass - WooCommerce Theme for Handmade Artists and Artisans versions up to, and including, 3.9.9.10 Description The issue allows authenticated attackers with Subscriber-level access and above to import demo content and overwrite the site du...

PT-2025-9804

Name of the Vulnerable Software and Affected Versions WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin versions up to, and including, 4.1.1 Description The issue is related to arbitrary SQL execution and privilege escalation due to a missing capability check on the...

WordPress plugin WP Online Contract has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin – WordPress Awesome Import & Export Plugin security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

WordPress plugin Zass has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Lafka has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-9818

Name of the Vulnerable Software and Affected Versions WP Online Contract plugin for WordPress versions up to, and including, 5.1.4 Description The issue allows unauthorized access due to a missing capability check on the json import and json export functions. This makes it possible for...

PT-2025-9814

Name of the Vulnerable Software and Affected Versions The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme versions up to, and including, 4.5.7 Description The issue allows authenticated attackers with Subscriber-level access and above to import demo data that overrides the si...

CVE-2024-13232: Missing Authorization

The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin for WordPress is vulnerable arbitrary SQL Execution and privilege escalation due to a missing capability check on the renderImport function in all versions up to, and including, 4.1.1. This makes it possible for...

Linux Distros Unpatched Vulnerability : CVE-2024-22020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code...

Assimp Heap Buffer Overflow DoS

The vulnerability of the SkipSpacesAndLineEnd function in the cross-platform asset import library Assimp Open Asset Import Library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

WordPress WP Online Contract plugin <= 5.1.4 - Missing Authorization to Unauthenticated Settings Import vulnerability

Missing Authorization to Unauthenticated Settings Import vulnerability discovered by Lucio Sá in WordPress Plugin WP Online Contract versions = 5.1.4...

WordPress Zass plugin <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import vulnerability

Missing Authorization to Authenticated Subscriber+ Demo Import vulnerability discovered by Lucio Sá in WordPress Theme Zass versions = 3.9.9.10...

WordPress Lafka theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import vulnerability

Missing Authorization to Authenticated Subscriber+ Demo Import vulnerability discovered by Lucio Sá in WordPress Theme Lafka versions = 4.5.7...

WordPress WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin <= 4.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Execution/Privilege Escalation vulnerability

WordPress WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin = 4.1.1 - Missing Authorization to Authenticated Subscriber+ Arbitrary SQL Execution/Privilege Escalation vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WordPress Awesome Impo...

Arbitrary File Read

github.com/mattermost/mattermost-server is vulnerable to Arbitrary File Read. The vulnerability is due to improper validation of board blocks when importing boards, which allows an attacker to perform a path traversal attack by importing and exporting a specially crafted import archive in Boards...

PT-2025-14761

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue was found in the ASE File Handler component, specifically affecting the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices in the file...

GO-2025-3480 Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server

Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server...