PT-2023-23992 · WordPress · Woocommerce Product Recommendations

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Recommendations plugin versions = 2.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure

Software Restrict Content Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-47668 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 1e46aa10dc26 Credits...

PT-2023-32307 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2023.2 Description: An unauthenticated remote Denial of Service DoS via the buffer was identified. The issue was reported by Jason Geffner. Recommendations: For Helix Core versions prior to 2023.2, update to versi...

PT-2023-30345 · Elementor · The Plus Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Pro versions n/a through 5.2.8 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows PHP Local File...

PT-2023-29738 · Couchbase · Couchbase Server

Name of the Vulnerable Software and Affected Versions: Couchbase Server version 7.2.0 Description: An issue was discovered in Couchbase Server where there is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster. Recommendations: For Couchbase Server version 7.2.0, consider...

WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Restrict Categories Type Plugin Vulnerable versions = 2.6.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47518 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8e4a6aad062c Credits Le Ngoc Anh...

PT-2023-30219 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the filename attribute of the pic4 multipart parameter is vulnerable. Recommendations: For Online Matrimonial...

PT-2023-14660 · Unknown · Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: Slimstat Analytics versions n/a through 5.0.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2023-21934 · Unknown · Biztechc Copy/Move Comments

Name of the Vulnerable Software and Affected Versions: biztechc Copy or Move Comments versions n/a through 5.0.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2023-32113 · WordPress · Templately

Name of the Vulnerable Software and Affected Versions: Templately WordPress plugin versions prior to 2.2.6 Description: The issue concerns improper authorization of the saved-templates/delete API endpoint, allowing unauthenticated users to delete arbitrary posts. Recommendations: For versions pri...

PT-2023-8554 · Unknown · Neshan Maps

Name of the Vulnerable Software and Affected Versions: Neshan Maps versions 1.1.4 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection attacks. This can be exploited by a remote attacker to conduct...

PT-2023-15051 · Armember · Armember

Name of the Vulnerable Software and Affected Versions: ARMember versions 3.4.11 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2023-23840 · Unknown · Rolf Van Gelder Order Your Posts Manually

Name of the Vulnerable Software and Affected Versions: Rolf van Gelder Order Your Posts Manually versions 2.2.5 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection,...

PT-2023-24717 · Unknown · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg versions through 2.7.11 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can be exploited...

PT-2023-15061 · Unknown · Gopi Ramasamy Email

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Email posts to subscribers versions n/a through 6.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2023-32422 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical vulnerability was found in the system, affecting the file /admin/courses/view course.php. The manipulation of the id argument leads to SQL injection. The exploit...

PT-2023-32427 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/students/manage academic.php. The manipulation of the id argument leads to SQL...

PT-2023-24784 · Kyocera · Kyocera Taskalfa 4053Ci

Name of the Vulnerable Software and Affected Versions: Kyocera TASKalfa 4053ci printers through 2VG S000.002.561 Description: The issue allows identification of valid user accounts via username enumeration. This occurs because the system returns a "nicht einloggen" error rather than a "falsch"...

PT-2023-32423 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue has been found in the processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed ...

PT-2023-26865 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: A memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm allows attackers to send arbitrary data to SMM, which could lead to privilege escalation. The...