WordPress Ultimate Post Kit Addons For Elementor plugin <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Social Count Static Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Post Kit versions = 3.11.7...

WordPress plugin Ultimate Post Kit Addons For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Ultimate Post Kit – Addons For Elementor Plugin <= 3.11.7 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Post Kit – Addons For Elementor Type Plugin Vulnerable versions = 3.11.7 Fixed in 3.11.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5662 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID eaf9b9b3c2a5 Credi...

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK allows a attacker to trigger a service failure.

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures...

WordPress Elements kit Elementor addons Plugin <= 3.1.4 is vulnerable to Broken Access Control

Software Elements kit Elementor addons Type Plugin Vulnerable versions = 3.1.4 Fixed in 3.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37255 Patch priority Low CVSS severity Low 5.3 Developer Wpmet PSID b0cbfbfccc4f Credits Rafie Muhammad Patchstack...

WordPress WP Directory Kit Plugin <= 1.3.6 is vulnerable to Content Injection

Software WP Directory Kit Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A3: Injection Classification Content Injection CVE CVE-2024-37253 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 2b9e3c80ffdc Credits Sandeep Vishwakarma from eSec Forte...

MAL-2024-4844 Malicious code in camera-kit (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in xbee-wifi-cloud-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3966 Malicious code in xbee-wifi-cloud-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tealium-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3083 Malicious code in tealium-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in float-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fbe52219de9cd7b8c9f5658b325616af364ff7bc56e5ab012eb702baeed800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2379 Malicious code in float-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fbe52219de9cd7b8c9f5658b325616af364ff7bc56e5ab012eb702baeed800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7085 Malicious code in @yieldstreet/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2895 Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sber-sberx-prime/prime-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3258 Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE: Security Advisory (SUSE-SU-2024:2173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...