CVE-2024-0839

CVE-2024-0839 concerns the WordPress plugin FeedWordPress. The vulnerability is an Insecure Direct Object Reference (IDOR) due to missing validation of the user-controlled key “guid,” allowing unauthenticated attackers to view draft posts that may contain sensitive information. Affected versions ...

CVE-2024-1370

CVE-2024-1370 affects the WordPress Maintenance Page plugin. A missing capability check in the subscribe_download AJAX handler in all versions up to 1.0.8 allows authenticated users with subscriber access or higher to download a CSV with subscriber emails. Affected versions: ≤1.0.8; impact is inf...

CVE-2024-1234

CVE-2024-1234 affects the WordPress plugin Exclusive Addons for Elementor (all versions up to 2.6.9). The root cause is insufficient input sanitization and output escaping in a data attribute (and related parameter handling), enabling a stored cross-site scripting (XSS) vulnerability. An attacker...

CVE-2024-0385

CVE-2024-0385 affects the Categorify WordPress plugin (versions up to and including 1.0.7.4). The vulnerability arises from a missing capability/authorization check within the categorifyAjaxAddCategory function, enabling authenticated users with subscriber-level access and above to modify data (a...

CVE-2024-1536

CVE-2024-1536 affects the Essential Addons for Elementor plugin for WordPress (up to version 5.9.9). The issue is Stored XSS via the plugin’s Event Calendar widget caused by insufficient input sanitization and output escaping on user-supplied attributes. Attackers with contributor+ privileges can...

CVE-2024-1690

CVE-2024-1690 affects the WordPress plugin “TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds.” All versions up to 1.4.10 are vulnerable to unauthorized data access due to a missing capability check in terawallet_export_user_search(), enabling auth...

CVE-2024-1176

CVE-2024-1176 affects the HT Easy GA4 – Google Analytics WordPress Plugin. The vulnerability is a missing capability check in login() that enables unauthenticated modification of the GA4 email. Affected versions are all up to and including 1.1.5. Remediation: upgrade to 1.1.6 or later (Wordfence/...

CVE-2024-1843

CVE-2024-1843 (Auto Affiliate Links, WordPress) is a publicly known vulnerability in the WP Auto Affiliate Links plugin (affected versions up to 6.4.3) where a missing capability check in aalAddLink allows authenticated users with subscriber access or higher to modify data by adding arbitrary lin...

CVE-2024-1071

Summary: CVE-2024-1071 affects WordPress via the Ultimate Member plugin, versions 2.1.3–2.8.2, with a SQL injection in the sorting parameter due to insufficient escaping and unprepared queries. This allows unauthenticated attackers to append or inject SQL to extract data from the database; impact...

CVE-2024-2126

The CVE-2024-2126 entry concerns Orbit Fox by ThemeIsle (WordPress plugin). A Stored Cross-Site Scripting (XSS) flaw exists in the Registration Form Widget across all versions up to and including 2.10.32, caused by insufficient input sanitization and output escaping. Exploitation requires authent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2024-25155

CVE-2024-25155 affects FileCatalyst Direct web server in versions 3.8.6–3.8.8. The issue arises from improper sanitization of illegal characters in URLs, which are then displayed on a subsequent error page. This can enable an attacker to craft a URL that executes arbitrary code within an HTML scr...

Cross site scripting

JFrog Artifactory versions below 7.77.7, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism...

CVE-2024-25154

CVE-2024-25154 affects FileCatalyst Direct 3.8.8 and earlier, due to improper URL validation that allows path traversal. An encoded payload can cause the web server to return files outside the web root, potentially leaking data. Public references in connected documents indicate remediation via up...

CVE-2024-25153

CVE-2024-25153 affects the FileCatalyst Workflow Web Portal’s ftpservlet, enabling a directory traversal that allows uploading files outside the intended uploadtemp directory. If a file lands in the web portal’s DocumentRoot, specially crafted JSPs could execute code, including web shells, leadin...

CVE-2023-52608

CVE-2023-52608 — Linux kernel (ARM SCMI): The issue is a race condition in the A2P channel where a late reply can be mis-associated with a newly enqueued SCMI command, causing the SMT area to be overwritten and potentially delaying or misrouting responses. The vulnerability is addressed by a cons...

CVE-2024-1508

CVE-2024-1508 describes a stored cross-site scripting flaw in the Prime Slider – Addons For Elementor (WordPress) plugin, affecting all versions up to 3.13.2. The vulnerability arises in the Mercury widget via the settings['title_tags'] attribute due to insufficient input sanitization and output ...

CVE-2024-1507

CVE-2024-1507 covers a Stored Cross-Site Scripting in the Prime Slider – Addons For Elementor plugin for WordPress. Affected: Prime Slider (Revolution of a slider, Hero Slider, Ecommerce Slider) up to v3.13.2. Root cause: insufficient input sanitization and output escaping for the Rubix widget’s ...

Cross site request forgery (csrf)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-2415

CVE-2024-2415 affects Movistar 4G router ES_WLD71-T1_v2.0.201820. Root cause is a command injection via an authenticated POST to the endpoint /cgi-bin/gui.cgi, allowing command execution inside the router. Impact is high (authenticated local command execution). Remediation/mitigation: apply vendo...