WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Edit WooCommerce Templates Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47509 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1d751e50449c Credits LEE SE...

WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)

Software SendPress Newsletters Type Plugin Vulnerable versions = 1.23.11.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47517 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9cc0e2ff8594 Credits Le Ngoc A...

WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Photo Feed Type Plugin Vulnerable versions = 2.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47522 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c41c9fcd587f Credits Le Ngoc Anh Required...

WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Category Post List Widget Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de7a709c5e66 Credits LEE SE HYOU...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-5506 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 273249a3fdc4 Credits Lana Codes Required privilege...

WordPress WPDBSpringClean Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

Software WPDBSpringClean Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47510 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b9275834f95c Credits LEE SE HYOUNG...

WordPress Auto Affiliate Links Plugin <= 6.4.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Auto Affiliate Links Type Plugin Vulnerable versions = 6.4.2.4 Fixed in 6.4.2.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47652 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4fff57eac2c5 Credits LEE ...

WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Arbitrary File Deletion

Software Awesome Support Type Plugin Vulnerable versions 6.1.5 Fixed in 6.1.5 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-5355 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID b2eca27b2e54 Credits Alex Sanford Require...

Rocky Linux 8 : cryptsetup (RLSA-2022:0370)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0370 advisory. - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical...

WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Q2W3 Post Order Type Plugin Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47521 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb5de227d10d Credits Le Ngoc Anh Require...

WordPress Extra Product Options for WooCommerce Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Extra Product Options for WooCommerce Type Plugin Vulnerable versions = 3.0.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47658 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 59c1ea87fa2e Credi...

WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)

Software Rename Media Files Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-32095 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID c2971a04bd19 Credits Taihei Shimamine Required...

WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Forms for Mailchimp by Optin Cat Type Plugin Vulnerable versions = 2.5.4 Fixed in 2.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47545 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 6854d5e5d188 Credits DoYeon Park...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5577373432807424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

lcms:cms_transform_all_fuzzer: Heap-buffer-overflow in cmsMLUsetWide

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6238462382309376 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_drop_archive

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4825341402939392 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

WordPress Short URL Plugin <= 1.6.8 is vulnerable to Broken Access Control

Software Short URL Type Plugin Vulnerable versions = 1.6.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47225 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 80acb0670d7b Credits Abdi Pranata Required privilege...

WordPress WP Affiliate Disclosure Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software WP Affiliate Disclosure Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47232 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 2924c14c37f1 Credits Abdi Pranata...

FreeBSD : chromium -- multiple vulnerabilities (a1e27775-7a61-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a1e27775-7a61-11ee-8290-a8a1599412c6 advisory. - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...

WordPress Digirisk Plugin <= 6.0.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Digirisk Type Plugin Vulnerable versions = 6.0.0.0 Fixed in 6.1.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5946 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ce9f12824b90 Credits Ala Arfaoui Required...