WordPress Hot Random Image plugin <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter vulnerability

Path Traversal to Authenticated Contributor+ Limited Arbitrary Image Access via path Parameter vulnerability discovered by Kishan Vyas in WordPress Plugin Hot Random Image versions = 1.9.2...

Quantum Steganography Using Catalytic and Entanglement-Assisted Quantum Codes

Steganography is the technique for transmitting a secret message by employing subterfuge to conceal it in innocent-looking data, rather than by overt security measures as in cryptography. Typically, non-degenerate quantum error-correcting codes QECCs are used as the cover medium, with the stego...

WordPress Order Delivery Date Pro for WooCommerce plugin < 12.4.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Order Delivery Date for WP e-Commerce versions 12.4.0...

WordPress Goodlayers Hotel plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Goodlayers Hotel versions = 3.1.4...

WordPress Goodlayers Hostel Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Goodlayers Hostel versions = 3.1.2...

WordPress Formulario de contacto SalesUp! plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Formulario de contacto SalesUp! versions = 1.0.14...

WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin School Management versions = 92.0.0...

WordPress WP Post Modules for Elementor plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin WP Post Modules for Elementor versions = 2.5.0...

librawspeed:PanasonicV8DecompressorFuzzer: Use-of-uninitialized-value in MemorySanitizer.h

Project: https://github.com/darktable-org/rawspeed.git Detailed Report: https://oss-fuzz.com/testcase?key=4713163956486144 Project: librawspeed Fuzzing Engine: libFuzzer Fuzz Target: PanasonicV8DecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash Type:...

quickjs:fuzz_eval: Heap-buffer-overflow in JS_CallInternal

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5597767097712640 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzeval Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...

WordPress wooexim plugin <= 5.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WOOEXIM versions = 5.0.0...

WordPress Spiritual Gifts Survey plugin <= 0.9.10 - Unauthenticated CSRF to XSS vulnerability

Unauthenticated CSRF to XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Spiritual Gifts Survey versions = 0.9.10...

WordPress Event Calendar plugin <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion vulnerability

Unauthenticated Arbitrary Calendar Deletion vulnerability discovered by Bob Matyas in WordPress Plugin Event Calendar versions = 1.0.4...

WordPress MapFig Studio plugin <= 0.2.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin MapFig Studio versions = 0.2.1...

WordPress profilepro plugin <= 1.3 - Subscriber+ Stored Cross Site Scripting vulnerability

Subscriber+ Stored Cross Site Scripting vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin profilepro versions = 1.3...

WordPress kbucket plugin < 4.1.5 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin KBucket versions 4.1.5...

WordPress Badgearoo plugin <= 1.0.14 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Badgearoo versions = 1.0.14...

WordPress 360 Product Rotation plugin <= 1.5.8 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin 360 Product Rotation versions = 1.5.8...

WordPress LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin < 8.0.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin LifterLMS versions 8.0.1...