PT-2023-12526 · WordPress · Abandoned Cart Lite For Woocommerce

Name of the Vulnerable Software and Affected Versions: Abandoned Cart Lite for WooCommerce plugin for WordPress versions up to and including 5.8.5 Description: The issue arises from missing or incorrect nonce validation on the wcal preview emails function, allowing unauthenticated attackers to...

PT-2023-18027 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds write due to an integer overflow in the rw i93 send to upper function of rw i93.cc. This could lead to local escalation of privilege wit...

PT-2023-26201 · Jenkins · Jenkins Mabl Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins mabl Plugin versions 0.0.46 and earlier Description: A missing permission check in the Jenkins mabl Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs...

PT-2023-19143 · Pixelgrade · Pixelgrade Comments Ratings Plugin

Name of the Vulnerable Software and Affected Versions: Pixelgrade Comments Ratings plugin versions 1.1.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

PT-2023-3915 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-25478 · Unknown · Tarteaucitron.Js

Name of the Vulnerable Software and Affected Versions: tarteaucitron.js versions prior to 1.13.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository amauric/tarteaucitron.js. Recommendations: For versions prior to 1.13.1, update to version...

PT-2023-19346 · Unknown · Dave Jesch Database Collation Fix

Name of the Vulnerable Software and Affected Versions: Dave Jesch Database Collation Fix plugin versions 1.2.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

PT-2023-4071 · Sap · Sap Netweaver Process Integration

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration version SAP XIAF 7.50 Description: The issue is related to the Message Display Tool MDT component of SAP NetWeaver Process Integration, which lacks proper authentication checks for certain functionalities. Th...

PT-2023-19206 · Hasthemes · Ht Menu

Name of the Vulnerable Software and Affected Versions: HasThemes HT Menu plugin versions 1.2.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2023-25943 · WordPress · Wpmobilepack.Com Wordpress Mobile Pack – Mobile Plugin For Progressive Web Apps & Hybrid Mobile Apps

Name of the Vulnerable Software and Affected Versions: WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin versions = 3.4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user in...

PT-2023-25378 · Unknown · Oopspam Anti-Spam

Name of the Vulnerable Software and Affected Versions: OOPSpam OOPSpam Anti-Spam plugin versions = 1.1.44 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-14783 · Apache · Apache Ambari

Name of the Vulnerable Software and Affected Versions: Apache Ambari versions 2.7.0 through 2.7.6 Description: The issue allows a malicious authenticated user to execute arbitrary code remotely due to SpringEL injection in the metrics source. Users are recommended to upgrade to version 2.7.7 to...

PT-2023-23085 · Unknown · Foundry Comments

Name of the Vulnerable Software and Affected Versions: Foundry Comments versions prior to 2.267.0 Description: A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the targ...

PT-2023-23276 · WordPress · Url Shortify

Name of the Vulnerable Software and Affected Versions: URL Shortify WordPress plugin versions prior to 1.7.0 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, f...

PT-2023-19342 · Lionscripts · Lionscripts Ip Blocker Lite

Name of the Vulnerable Software and Affected Versions: LionScripts: IP Blocker Lite plugin versions = 11.1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-25321 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to the improper handling of an additional special element in the GitHub repository squidex/squidex. Recommendations: For versions prior to 7.4.0, update to version 7.4.0 or lat...

PT-2023-18639 · Unknown · Bigcontact Contact Page Plugin

Name of the Vulnerable Software and Affected Versions: BigContact Contact Page plugin versions 1.5.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-22964 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions prior to 1.0.7 Description: The issue is related to improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

PT-2023-4217 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow in the addWifiMacFilter function, which can be triggered via the deviceId parameter. This could allow a remote attacker to execute arbitrary code...

PT-2023-20096 · Unknown · Jason Rouet Weather Station

Name of the Vulnerable Software and Affected Versions: Jason Rouet Weather Station plugin versions = 3.8.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...