CVE-2024-30445

Technical details for CVE-2024-30445 are not provided in the connected documents. Public disclosure appears limited to the initial description; monitor for official vendor advisories and CVE database updates for affected products, versions, impact, and remediation.

CVE-2024-30450

CVE-2024-30450 is a Stored XSS affecting the OpenStreetMap for Gutenberg and WPBakery Page Builder plugin by Step-Byte-Service GmbH. The connected Red Hat record reiterates the description: Improper Neutralization of Input During Web Page Generation allowing stored XSS, affecting OpenStreetMap fo...

CVE-2024-30460

CVE-2024-30460 concerns a Cross-Site Request Forgery in the WordPress plugin Tumult Hype Animations (versions

CVE-2024-30454

CVE-2024-30454 is a CSRF vulnerability reported for VeronaLabs WP SMS. The connected Red Hat entry confirms the issue description and states the vulnerability affects WP SMS versions up to 6.6.2 (no details on fixed/patched version are provided in the documents). The initial description also note...

CVE-2024-25944

CVE-2024-25944 affects Dell OpenManage Enterprise (Dell OpenManage Enterprise, v4.0 and prior). A path traversal vulnerability allows an unauthenticated attacker to access files on the server filesystem with the web application’s privileges. Connected sources confirm versions 4.0 and earlier are ...

CVE-2024-30462

CVE-2024-30462 describes a Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF), affecting versions n/a through 1.3.5.1. The NVD entry lists CVSS 3.1 base metrics with a base score of 8.8 (High) and impact on confidentiality, integr...

CVE-2024-30463

Technical details about CVE-2024-30463 (BEAR missing authorization) are not provided in the supplied documents. No product version, attack vector, impact, or fix is confirmed here. Monitor official advisories for updates and remediation guidance.

CVE-2024-30477

Technical details about CVE-2024-30477 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-30247

CVE-2024-30247 (NextcloudPi) corresponds to a command injection vulnerability in NextcloudPi images (via the web panel) allowing root-level code execution without authentication. Affected: NextcloudPi releases prior to 1.53.1. Impact scoped to untrusted access through the web-panel; risk includes...

CVE-2024-30518

Technical details about CVE-2024-30518 are not provided in the supplied documents. The data confirms a CSRF issue in ThemeLocation Custom WooCommerce Checkout Fields Editor (versions

CVE-2024-30513

CVE-2024-30513 weakly documented in the provided sources is described as an Authorization Bypass Through User-Controlled Key in ProfileGrid (Metagauss ProfileGrid), affecting ProfileGrid versions up to 5.7.2. Connected documents corroborate the authorisation bypass context and link to PatchStack ...

CVE-2024-30514

CVE-2024-30514 affects Paid Memberships Pro – Payfast Gateway Add On for WordPress, with the vulnerability described as an insertion of sensitive information into the log file. The issue affects the Payfast gateway add-on versions up to 1.4.1. The connected Red Hat entry reproduces the same descr...

CVE-2024-29901

CVE-2024-29901 concerns the AuthKit Next.js library. The issue arises from improper handling of expired sessions, allowing an attacker to reuse an expired session by controlling the x-workos-session header. Affected component: workOS/AuthKit Next.js integration (authkit-nextjs). Impact is describ...

CVE-2024-29201

JumpServer (open source bastion host) has a vulnerability in its Ansible workflow that allows bypassing input validation to execute arbitrary code inside the Celery container, which runs with root privileges and has database access. Exploitation could lead to unauthorized data access or manipulat...

CVE-2024-3081

CVE-2024-3081 affects EasyCorp EasyAdmin up to 4.8.9. The XSS flaw is in the Autocomplete function (assets/js/autocomplete.js) where manipulating the item argument enables cross-site scripting. The issue is exploitable remotely. Upgrading to EasyAdmin 4.8.10 fixes the vulnerability (patch identif...

CVE-2024-30508

CVE-2024-30508: Missing Authorization vulnerability in ThimPress WP Hotel Booking. Affects WP Hotel Booking

CVE-2024-30506

Technical details about CVE-2024-30506 (Affects Vsourz All In One Redirection) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories to obtain affected versions, impact specifics, and remediation.

CVE-2024-30501

The CVE-2024-30501 entry concerns WPChill’s Download Monitor plugin (WordPress) up to version 4.9.4, where an improper neutralization of SQL elements causes an SQL Injection. The vulnerability affects the plugin’s admin-facing code and can impact confidentiality, integrity, and availability as de...

CVE-2024-30496

CVE-2024-30496 affects BdThemes Element Pack Elementor Addons (Header/Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) up to version 5.5.3. The entry describes an SQL Injection caused by improper neutralization of elements in SQL commands. The vulnerability is classified as netwo...

CVE-2024-30494

CVE-2024-30494 is an SQL injection in the OSS Aliyun WordPress plugin (up to version 1.4.10). The vulnerability is due to improper neutralization of input in the plugin’s SQL commands and is labeled as Authenticated (Administrator+) SQL Injection . Public references in the supplied documents indi...