WordPress WordPress GDPR & CCPA Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software WordPress GDPR & CCPA Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-11069 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b71de0a7a1a1 Credits István Márton...

WordPress Explara Events Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Explara Events Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52466 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb44f6bfc562 Credits Mika Required privilege...

WordPress amr shortcodes Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

Software amr shortcodes Type Plugin Vulnerable versions = 1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52464 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f797c3bcc9b6 Credits Le Ngoc Anh Required privilege...

WordPress HTML5 Lyrics Karaoke Player Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software HTML5 Lyrics Karaoke Player Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52473 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd318a16984e Credits João Pedro S Alcântara...

WordPress GoQSmile Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software GoQSmile Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbb042e2576e Credits Mika Required privilege Unauthenticated...

WordPress Elfsight Telegram Chat CC Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Elfsight Telegram Chat CC Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10390 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 79fba1da063a Credits István...

WordPress Awesome Studio Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Awesome Studio Type Plugin Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83cb8daf8eb9 Credits Le Ngoc Anh Required privilege...

WordPress Post By Email Plugin <= 1.0.4b is vulnerable to Cross Site Scripting (XSS)

Software Post By Email Type Plugin Vulnerable versions = 1.0.4b Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52463 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d62ded22dc8c Credits Mika Required privilege...

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6713319420919808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

mdbtools:fuzz_mdb: Crash in mdb_get_int16

Detailed Report: https://oss-fuzz.com/testcase?key=4711797140881408 Project: mdbtools Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdb Job Type: libfuzzerubsanmdbtools Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5322c7c000 Crash State: mdbgetint16 mdbkkdtoprops mdbreadcatalog...

WordPress Fancy Gallery Plugin <= 1.6.58 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Gallery Type Plugin Vulnerable versions = 1.6.58 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10875 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3416f5a9cb28 Credits Peter Thaleikis...

WordPress Bounce Handler MailPoet 3 Plugin <= 1.3.21 is vulnerable to Cross Site Scripting (XSS)

Software Bounce Handler MailPoet 3 Type Plugin Vulnerable versions = 1.3.21 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9938 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ab6f81da0c5a Credits Colin Xu...

WordPress SimpleForm Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software SimpleForm Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10883 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c9428f96f6e1 Credits Peter Thaleikis Required...

WordPress SimpleForm Contact Form Submissions Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software SimpleForm Contact Form Submissions Type Plugin Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10884 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b7fe42353c4 Credits...

WordPress Event Tickets with Ticket Scanner Plugin <= 2.3.11 is vulnerable to Remote Code Execution (RCE)

Software Event Tickets with Ticket Scanner Type Plugin Vulnerable versions = 2.3.11 Fixed in 2.3.12 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-52427 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 3ef418855694 Credits Hakiduck...

WordPress LearnPress Export Import Plugin <= 4.0.4 is vulnerable to Cross Site Scripting (XSS)

Software LearnPress Export Import Type Plugin Vulnerable versions = 4.0.4 Fixed in 4.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9609 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 496adf4dad4b Credits vgo0...

WordPress Simple File List Plugin < 6.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Simple File List Type Plugin Vulnerable versions 6.1.13 Fixed in 6.1.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10146 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0c5c97b90269 Credits tu3n4nh Required...

WordPress Hide My WP Ghost Plugin <= 5.3.01 is vulnerable to Cross Site Scripting (XSS)

Software Hide My WP Ghost Type Plugin Vulnerable versions = 5.3.01 Fixed in 5.3.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10825 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3f125ce149ef Credits Peter Thaleiki...

WordPress WP Activity Log Plugin <= 5.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Activity Log Type Plugin Vulnerable versions = 5.2.1 Fixed in 5.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10793 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID ad9533377437 Credits mikemyers Required...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2024-757)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-757 advisory. There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted...