WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin < 1.1.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin versions 1.1.9. Solution Update the WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin to the latest available version at least...

WordPress WooCommerce Product Attachment plugin <= 2.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Product Attachment plugin versions = 2.1.2. Solution Update the WordPress WooCommerce Product Attachment plugin to the latest available version at least 2.1.3...

WordPress Booking Weir plugin < 1.0.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Booking Weir plugin versions 1.0.11. Solution Update the WordPress Booking Weir plugin to the latest available version at least 1.0.11...

WordPress StoreCustomizer – WooCommerce plugin to Customize all WooCommerce Pages plugin < 2.3.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress StoreCustomizer – WooCommerce plugin to Customize all WooCommerce Pages plugin versions 2.3.8. Solution Update the WordPress StoreCustomizer – WooCommerce plugin to Customize all WooCommerce Pages plugin to the latest availabl...

WordPress BP WC Vendors plugin <= 1.1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress BP WC Vendors plugin versions = 1.1.6. Solution No patched version available...

WordPress Scheduled Notification Bar plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Scheduled Notification Bar plugin versions = 1.0.1. Solution No patched version available...

WordPress Events Calendar Registration plugin <= 1.9.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Events Calendar Registration plugin versions = 1.9.2. Solution No patched version available...

WordPress Netforum Member Directory plugin <= 1.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Netforum Member Directory plugin versions = 1.11. Solution No patched version available...

WordPress W3SCloud Contact Form 7 to Zoho CRM plugin <= 2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress W3SCloud Contact Form 7 to Zoho CRM plugin versions = 2.2. Solution No patched version available...

WordPress Stripe Express plugin < 1.7.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Stripe Express plugin versions 1.7.7. Solution Update the WordPress Stripe Express plugin to the latest available version at least 1.7.7...

WordPress Auto SEO META keywords (META tags keywords) optimization + WooCommerce plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto SEO META keywords META tags keywords optimization + WooCommerce plugin versions = 1.0.3. Solution Update the WordPress Auto SEO META keywords META tags keywords optimization + WooCommerce Test...

WordPress Email Header Footer plugin <= 1.2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Email Header Footer plugin versions = 1.2.1. Solution No patched version available...

GSD-2022-1000630 net/smc: Transitional solution for clcsock race issue

net/smc: Transitional solution for clcsock race issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

WordPress Amelia plugin <= 1.0.45 - Arbitrary Customer Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Customer Deletion via Cross-Site Request Forgery CSRF vulnerability discovered by Muhamad Hidayat in WordPress Amelia plugin versions = 1.0.45. Solution Update the WordPress Amelia plugin to the latest available version at least 1.0.46...

FlatPress <= 1.2.1 XSS Vulnerability (CVE-2020-35241)

FlatPress is prone to a cross-site scripting XSS vulnerability in the Blog Content component. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Windows

Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HCL Sametime 安全漏洞

HCL Sametime is a conferencing solution from HCL Software. A path traversal vulnerability exists in HCL Sametime that stems from the fact that HCL Sametime for Android is susceptible to multiple path traversal vulnerabilities...

GSD-2022-1000264 net/smc: Transitional solution for clcsock race issue

net/smc: Transitional solution for clcsock race issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

IBM Maximo Anywhere Encryption Issue Vulnerability (CNVD-2022-12745)

IBM Maximo Anywhere is a next-generation mobile solution from IBM built on the IBM Worklight platform. The solution supports remote access to IBM Maximo Asset Management a comprehensive asset lifecycle and maintenance management solution workflow and asset management via mobile devices. an...

IBM Maximo Anywhere Encryption Issue Vulnerability

IBM Maximo Anywhere is a next-generation mobile solution from IBM built on the IBM Worklight platform. An encryption vulnerability exists in IBM Maximo Anywhere, which stems from the product's failure to effectively protect program source code. An attacker could obfuscate the source code through...