11783 matches found
PT-2023-3567 · WordPress · Blogger Importer Plugin
Name of the Vulnerable Software and Affected Versions: Blogger Importer Plugin versions up to 0.5 Description: The issue is related to the function start/restart of the file blogger-importer.php, which is vulnerable to cross-site request forgery CSRF attacks. This can be exploited remotely,...
CVE-2023-32582
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kyle Maurer Don8 plugin = 0.4 versions...
PT-2023-23040 · Unknown +1 · Cryptbase.Dll +1
Name of the Vulnerable Software and Affected Versions: Captura versions up to 8.0.0 Description: A critical vulnerability was found in Captura, affecting unknown code in the library CRYPTBASE.dll. The manipulation leads to an uncontrolled search path. Attacking locally is a requirement, and the...
up-front-works.jp Cross Site Scripting vulnerability OBB-3377166
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0616
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this...
PT-2023-16789 · WordPress · Bookly
Name of the Vulnerable Software and Affected Versions: Bookly plugin for WordPress versions up to, and including, 21.5 Description: The issue is related to Stored Cross-Site Scripting via service titles due to insufficient input sanitization and output escaping. This allows authenticated attacker...
CVE-2023-32205
In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
USN-6134-1 linux-intel-iotg-5.15 vulnerabilities
It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...
DEBIAN-CVE-2023-32324
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
PT-2023-10172 · Unknown · Vaultpress Plugin +1
Name of the Vulnerable Software and Affected Versions: VaultPress Plugin versions up to 1.6.0 Description: A critical issue has been found in the VaultPress Plugin, affecting the protect aioseo ajax function of the class.vaultpress-hotfixes.php file in the MailPoet Plugin component. This issue...
PT-2023-22553 · Unknown · Beipyvideoresolution
Name of the Vulnerable Software and Affected Versions: BeipyVideoResolution versions up to 2.6 Description: A problematic vulnerability was found in BeipyVideoResolution, affecting an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting and can be...
PT-2023-10171 · Bestwebsoft · Bestwebsoft Twitter Plugin
Name of the Vulnerable Software and Affected Versions: BestWebSoft Twitter Plugin versions up to 1.3.2 Description: A vulnerability was found in the BestWebSoft Twitter Plugin. It affects the function twttr settings page of the file twitter.php. The manipulation of the argument twttr url...
CVE-2023-32800
Unauth. Reflected Cross-Site Scripting XSS vulnerability in One Rank Math SEO PRO plugin = 3.0.35 versions...
CVE-2023-33316
Cross-Site Request Forgery CSRF vulnerability in WooCommerce WooCommerce Follow-Up Emails AutomateWoo plugin = 4.9.40 versions...
CVE-2023-33319
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce WooCommerce Follow-Up Emails AutomateWoo plugin = 4.9.40 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WooCommerce WooCommerce Follow-Up Emails AutomateWoo plugin = 4.9.40 versions...
CVE-2023-32958
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Nose Graze Novelist plugin = 1.2.0 versions...
CVE-2023-33319
CVE-2023-33319: Unauth. Reflected Cross-Site Scripting in the WooCommerce Follow-Up Emails (AutomateWoo) plugin, affecting versions up to and including 4.9.40. The vulnerability is an unauthenticated XSS that can be triggered via user-controlled input reflected in the response. Patchstack lists a...
CVE-2023-33316 WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WooCommerce WooCommerce Follow-Up Emails AutomateWoo plugin = 4.9.40 versions...