PT-2024-23147 · W3 Eden · W3 Eden

Name of the Vulnerable Software and Affected Versions: W3 Eden, Inc. Premium Packages versions n/a through 5.8.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2024-23149

Name of the Vulnerable Software and Affected Versions HasThemes WC Builder versions 1.0.18 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2024-20507 · Wedevs · Wedevs Woocommerce Conversion Tracking

Name of the Vulnerable Software and Affected Versions: weDevs WooCommerce Conversion Tracking versions n/a through 2.0.11 Description: The issue is related to a Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking. This vulnerability affects the specified versions of the...

PT-2024-11726 · Sharethis · Sharethis Dashboard For Google Analytics

Name of the Vulnerable Software and Affected Versions: ShareThis Dashboard for Google Analytics versions through 3.1.4 Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide ...

PT-2024-22630 · WordPress · Wp-Lister Lite For Amazon

Name of the Vulnerable Software and Affected Versions: WP-Lister Lite for Amazon versions 2.6.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables potential...

PT-2024-22731 · Tablesome · Tablesome

Name of the Vulnerable Software and Affected Versions: Table & Contact Form 7 Database – Tablesome versions 1.0.0 through 1.0.27 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which c...

PT-2024-18826 · WordPress · Masterstudy Lms Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress versions up to, and including, 3.2.10 Description: The issue allows unauthenticated attackers to extract sensitive data, including all registered...

PT-2024-17572 · WordPress · Elementor Header & Footer Builder

Name of the Vulnerable Software and Affected Versions: Elementor Header & Footer Builder plugin for WordPress versions up to, and including, 1.6.24 Description: The issue is related to Stored Cross-Site Scripting via the flyout layout attribute due to insufficient input sanitization and output...

PT-2024-21193 · Miniorange · Miniorange Malware Scanner

Name of the Vulnerable Software and Affected Versions: miniorange Malware Scanner versions through 4.7.2 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting...

PT-2024-14182 · Hasthemes · Ht Mega – Absolute Addons For Elementor

Name of the Vulnerable Software and Affected Versions: HasThemes HT Mega – Absolute Addons For Elementor versions through 2.3.3 Description: A Cross-Site Request Forgery CSRF issue affects the specified software, allowing unauthorized actions to be performed on behalf of a user without their...

PT-2024-14912 · Openvpn · Openvpn 3 Core Library

Name of the Vulnerable Software and Affected Versions: OpenVPN 3 Core Library versions through 3.8.3 Description: The issue is related to the PKCS7 parser in the OpenVPN 3 Core Library, which did not properly validate the parsed data. This would result in the application crashing. Recommendations...

PT-2024-15687 · WordPress · Piraeus Bank Woocommerce Payment Gateway

Name of the Vulnerable Software and Affected Versions: Piraeus Bank WooCommerce Payment Gateway plugin for WordPress versions up to, and including, 1.6.5.1 Description: The issue is related to a time-based blind SQL Injection vulnerability via the MerchantReference parameter. This vulnerability i...

PT-2024-20509 · WordPress · Wp Auto Listings

Name of the Vulnerable Software and Affected Versions: Auto Listings – Car Listings & Car Dealership Plugin for WordPress versions n/a through 2.6.5 Description: The issue affects the WP Auto Listings plugin, allowing Stored XSS due to improper neutralization of input during web page generation...

PT-2024-15091 · WordPress · Generatepress Premium

Name of the Vulnerable Software and Affected Versions: GeneratePress Premium plugin for WordPress versions up to, and including, 2.3.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's custom meta output due to insufficient input sanitization and output escaping on...

PT-2024-1028 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.3 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. An attacker could leverage this to bypass mitigations such as ASLR...

PT-2024-11598 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Memberships, Groups and Communities versions through 5.0.3 Description: The issue is related to a Missing Authorization vulnerability. This means that certain actions or data may be accessible without the necessar...

PT-2024-11742 · WordPress · Js Help Desk – Best Help Desk & Support Plugin

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the JS Help Desk – Best Help Desk & Support Plugin...

PT-2024-14426 · Unknown · Teachpress

Name of the Vulnerable Software and Affected Versions: teachPress versions n/a through 9.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the us...

PT-2023-31841 · Woo · Woopayments

Name of the Vulnerable Software and Affected Versions: WooPayments – Fully Integrated Solution Built and Supported by Woo versions n/a through 6.9.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the WooPayments...

PT-2023-31707 · Unknown · Upsolution Impreza

Name of the Vulnerable Software and Affected Versions: UpSolution Impreza – WordPress Website and WooCommerce Builder versions n/a through 8.17.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows...