226 matches found
Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-136)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, high availability of the management node, object storage management, networking, and monitoring. Additionally, this release delivers stability improvements and addresses issues found ...
CVE-2024-0615
The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0 via the API. This makes it possible for unauthenticated attackers to...
CVE-2024-0615 Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure
The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0 via the API. This makes it possible for unauthenticated attackers to...
PT-2024-15691 · WordPress · The Content Control – The Ultimate Content Restriction Plugin
Name of the Vulnerable Software and Affected Versions: The Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More plugin for WordPress versions up to, and including, 2.1.0 Description: The plugin is vulnerable to Sensitive Information Exposur...
CVE-2024-32524 WordPress Custom Order Statuses for WooCommerce plugin <= 1.5.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
CVE-2024-32524 WordPress Custom Order Statuses for WooCommerce plugin <= 1.5.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
CVE-2024-32524
Technical details about CVE-2024-32524 are not present in the provided documents. No affected version specifics, root cause, or fixes are disclosed here. Monitor for updates from vendor advisories and CVE databases.
WordPress Plugin Custom Order Statuses for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-24643 · Woocommerce · Nuggethon Custom Order Statuses For Woocommerce
Name of the Vulnerable Software and Affected Versions: Nuggethon Custom Order Statuses for WooCommerce versions 1.5.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Custom Order Statuses for WooCommerce plugin. Recommendation...
WordPress Custom Order Statuses for WooCommerce plugin <= 1.5.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Custom Order Statuses for WooCommerce versions = 1.5.2...
WordPress Custom Order Statuses for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control
Software Custom Order Statuses for WooCommerce Type Plugin Vulnerable versions = 1.5.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32524 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6d3c50d7dc4c Credits Abdi...
CVE-2024-2110
The CVE-2024-2110 issue affects the WordPress plugin Events Manager – Calendar, Bookings, Tickets, and more! The Red Hat and Wordfence references confirm a Cross-Site Request Forgery (CSRF) vulnerability in all versions up to 6.4.7.1 due to missing/incorrect nonce validation on multiple actions. ...
CVE-2024-25930
Cross-Site Request Forgery CSRF vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
CVE-2024-25930
Cross-Site Request Forgery CSRF vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2...
WordPress Plugin Custom Order Statuses for WooCommerce Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Custom Order Statuses for...
CVE-2024-25930
CVE-2024-25930 affects Nuggethon Custom Order Statuses for WooCommerce (plugin
PT-2024-21224 · Woocommerce · Nuggethon Custom Order Statuses For Woocommerce
Name of the Vulnerable Software and Affected Versions: Nuggethon Custom Order Statuses for WooCommerce versions 1.5.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
CVE-2024-1778
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ztdcfcfchangebookmark function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to alter...
CVE-2024-1778 Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ztdcfcfchangebookmark function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to alter...
WordPress Custom Order Statuses for WooCommerce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Custom Order Statuses for WooCommerce Type Plugin Vulnerable versions = 1.5.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-25930 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2ff127ab6f8c Credits...