PT-2022-12995

Name of the Vulnerable Software and Affected Versions The Cookie Information | Free GDPR Consent Solution WordPress plugin versions prior to 2.0.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly escape user data before...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Cookie Information | Free GDPR Consent Solution plugin prior to version 2.0.8 is vulnerable to A cross-site scripting vulnerability...

CVE-2022-0147: Improper Neutralization of Input During Web Page Generation

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

Aternity SteelCentral AppInternals Directory Traversal Vulnerability (CNVD-2022-22671)

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A directory traversal vulnerability exists in Aternity SteelCentral AppInternals, which stems from /api/appInternals/1.0/agent/da/pcf that does not perform any validation of user input that allows...

Mageia: Security Advisory (MGASA-2022-0098)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

temoignages.re Improper Access Control vulnerability OBB-2424763

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Arbitrary file write in nats-server

This document is canonically: Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. JetStream is the optional RAFT-based resilient persistent feature of NATS. Problem Description The JetStream...

GHSA-6H3M-36W8-HV68 Arbitrary file write in nats-server

This document is canonically: Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. JetStream is the optional RAFT-based resilient persistent feature of NATS. Problem Description The JetStream...

SUSE: Security Advisory (SUSE-SU-2022:0719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Music Player for Elementor – Audio Player & Podcast Player plugin < 1.5.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Music Player for Elementor – Audio Player & Podcast Player plugin versions 1.5.5. Solution Update the WordPress Music Player for Elementor – Audio Player & Podcast Player plugin to the latest available version at least 1.5.5...

WordPress Expire tags plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Expire tags plugin versions = 1.1. Solution No patched version available...

WordPress F4 Post Tree plugin <= 1.1.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress F4 Post Tree plugin versions = 1.1.8. Solution Update the WordPress F4 Post Tree plugin to the latest available version at least 1.1.9...

WordPress Scheduled Notification Bar plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Scheduled Notification Bar plugin versions = 1.0.1. Solution No patched version available...

WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin <= 1.4.16 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin versions = 1.4.16. Solution Update the WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin to the latest available version at least...

WordPress Freshing plugin <= 1.1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Freshing plugin versions = 1.1.3. Solution No patched version available...

WordPress WooCommerce Product Attachment plugin <= 2.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Product Attachment plugin versions = 2.1.2. Solution Update the WordPress WooCommerce Product Attachment plugin to the latest available version at least 2.1.3...

WordPress W3SCloud Contact Form 7 to Zoho CRM plugin <= 2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress W3SCloud Contact Form 7 to Zoho CRM plugin versions = 2.2. Solution No patched version available...

WordPress BNG Gateway For WooCommerce plugin <= 1.6.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BNG Gateway For WooCommerce plugin versions = 1.6.10. Solution No patched version available...

WordPress Freemage plugin <= 1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Freemage plugin versions = 1.0. Solution No patched version available...

WordPress DeMomentSomTres Categories plugin <= 201704251008 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress DeMomentSomTres Categories plugin versions = 201704251008. Solution No patched version available...