WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Woffice versions = 5.4.14...

PT-2024-17355 · WordPress · Property Hive Mortgage Calculator

Name of the Vulnerable Software and Affected Versions: Property Hive Mortgage Calculator plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is related to Stored Cross-Site Scripting via the price parameter due to insufficient input sanitization and output escaping...

WordPress plugin iChart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

PT-2024-17350 · WordPress · Ichart

Name of the Vulnerable Software and Affected Versions: iChart – Easy Charts and Graphs plugin for WordPress versions up to, and including, 2.1.0 Description: The issue is related to Stored Cross-Site Scripting via the width parameter due to insufficient input sanitization and output escaping. Thi...

Silicon Labs Z-Wave 700和800 安全漏洞

Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are both a family of chips from Silicon Labs, USA. A security vulnerability exists in Silicon Labs Z-Wave 700 and 800 v7.21.1, which stems from insecure privilege management. An attacker exploiting this...

whistle 安全漏洞

whistle is a Node-based implementation of a cross-platform packet-catching debugging tool for individual developers at avenwu. A security vulnerability exists in whistle v.2.9.90 and earlier versions. An attacker can exploit this vulnerability to execute malicious API calls to execute arbitrary...

CVE-2024-53819

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.0...

CVE-2023-47849

Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through = 2.2.4...

CVE-2023-32094

Missing Authorization vulnerability in Felix W. Extended Post Status extended-post-status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through = 1.0.19...

CVE-2023-29433

Missing Authorization vulnerability in carsonxu tencentcloud-cos tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentcloud-cos: from n/a through = 1.0.7...

CVE-2023-29429

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 2.3.2.1...

CVE-2023-30486

Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through = 2.0.0...

CVE-2023-29422

Missing Authorization vulnerability in alexacrm Dynamics 365 Integration integration-dynamics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamics 365 Integration: from n/a through = 1.3.13...

CVE-2023-28688

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7...

CVE-2024-54220

CVE-2024-54220 concerns WordPress plugin FAT Services Booking (Roninwp FAT Services Booking). The issue is an Stored XSS caused by improper neutralization of input during web page generation, affecting FAT Services Booking versions up to 5.6 (n/a through 5.6). The CVSSv3.1/3.1 vector in the initi...

CVE-2024-54226

CVE-2024-54226 describes a CSRF to Stored XSS in the WordPress plugin Country Blocker (affected versions: up to 3.2, vendor: Karl Kiesinger). The entry indicates a high-severity issue (CVSS v3.1 base score 7.1) with potential stored cross-site script execution, and in the Wordfence context the vu...

CVE-2023-25966 WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 5.1.4...

Malicious code in react-redux-up (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11431 Malicious code in react-redux-up (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress plugin Analytify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...