WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)

Software CartFlows Pro Type Plugin Vulnerable versions = 1.11.11 Fixed in 1.11.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36686 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fde18e13d181 Credits Rafie Muhammad...

PaulPrinting CMS - (Search Delivery) Cross Site Vulnerability

Document Title: =============== PaulPrinting CMS - Search Delivery Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2286 Release Date: ============= 2023-07-16 Vulnerability Laboratory ID VL-ID: ==================================...

WordPress WPFunnels Plugin <= 2.7.16 is vulnerable to Cross Site Scripting (XSS)

Software WPFunnels Type Plugin Vulnerable versions = 2.7.16 Fixed in 2.7.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-37977 Patch priority Medium CVSS severity Medium 7.1 Developer WPFunnels Team PSID 5b27642361cb Credits LEE SE HYOUNG hackintoanetwork Requir...

WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Authors List Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-37981 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 38312864f014 Credits LEE SE HYOUNG hackintoanetwork...

Exploit for Cross-site Scripting in Monsterinsights

CVE-2022-3904 CVE-2022-3904 MonsterInsights 8.9.1 - Store...

WordPress Variation Images Gallery for WooCommerce Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Variation Images Gallery for WooCommerce Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37894 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bbcae361c0a5...

WordPress Radio Forge Muses Player with Skins Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software Radio Forge Muses Player with Skins Type Plugin Vulnerable versions = 2.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37976 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 433315cbcfd4 Credits L...

WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Coming Soon Chop Chop Type Plugin Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37893 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7a25fdf76e34 Credits Phd Required...

WordPress Twittee Text Tweet Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Twittee Text Tweet Type Plugin Vulnerable versions = 1.0.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0602 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID aa28f842b39a Credits Shreya Pohekar...

WordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Variation Swatches for WooCommerce Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37975 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 70e0da08f785 Credit...

Advisory ROSA-SA-2023-2189

Software: kernel-ml 5.15.117 OS: rosa-server79 packageevrstring: kernel-ml-5.15.117-1.res7 CVE-ID: CVE-2023-31085 BDU-ID: 2023-02516 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the mtddivbyeb function in the include/linux/mtd/mtd/mtd.h module of the Linux operating system kernel is related to...

Virtuozzo Hybrid Infrastructure 5.4 Update 3 Hotfix 1 (5.4.3-102)

This update provides important security fixes. Vulnerability id: VSTOR-71357 Fixes for three high-severity and six medium-severity security vulnerabilities...

WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Ship to Multiple Addresses Type Plugin Vulnerable versions = 3.8.5 Fixed in 3.8.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37873 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3c91f20c2a29...

WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Broken Access Control

Software WooCommerce Ship to Multiple Addresses Type Plugin Vulnerable versions = 3.8.5 Fixed in 3.8.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-37872 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7919a835fac3 Credits...

WordPress JetFormBuilder Plugin <= 3.0.8 is vulnerable to Privilege Escalation

Software JetFormBuilder Type Plugin Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37866 Patch priority Medium CVSS severity Medium 7.2 Developer Crocoblock PSID bb75400351be Credits Rafie...

WordPress Masteriyo - LMS Plugin < 1.6.8 is vulnerable to Sensitive Data Exposure

Software Masteriyo - LMS Type Plugin Vulnerable versions 1.6.8 Fixed in 1.6.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Masteriyo PSID aef3f4a1c0c4 Credits Unknown Required privilege Subscriber...

Citrix Gateway And Cloud MFA Insufficient Session Validation

Document Title: =============== Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2324 Vulnerability...

WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

Software WPFactory Helper Type Plugin Vulnerable versions = 1.5.2 Fixed in 1.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36689 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4681ca256d88 Credits Le Ngoc Anh...

WordPress WP-Optimize Plugin < 3.2.13 is vulnerable to Cross Site Scripting (XSS)

Software WP-Optimize Type Plugin Vulnerable versions 3.2.13 Fixed in 3.2.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1119 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 74a58d2a57e4 Credits Paolo Elia Required...

WordPress Kingkong Board Plugin <= 2.1.0.2 is vulnerable to Broken Access Control

Software Kingkong Board Type Plugin Vulnerable versions = 2.1.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36694 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 592012ceca48 Credits Abdi Pranata Required...