PT-2024-14173 · Soliloquy · Slider

Name of the Vulnerable Software and Affected Versions: Slider by Soliloquy versions 2.7.2 and earlier Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized access or actions...

PT-2024-12077 · Themeum · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS versions 2.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in Themeum Tutor LMS. Recommendations: For versions 2.1.8 and earlier, update to a version later than 2.1.8 to resolve the issue...

Rank Math SEO < 1.0.219 - Authenticated Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow users with access to the General Settings by default admin, however such access can be given to lower roles via the Role Manager feature of the plugin to perform Stored Cross-Site Scripting attacks even wh...

PT-2024-26160 · Softlab · Softlab Radio Player

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions 2.0.73 and earlier Description: The issue is related to a Missing Authorization vulnerability in SoftLab Radio Player. Recommendations: For versions 2.0.73 and earlier, update to a version that contains a fix for...

PT-2024-24440 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.9.14 and earlier Description: The issue is related to a Missing Authorization vulnerability in Welcart e-Commerce. Recommendations: For versions 2.9.14 and earlier, update to a version that contains a fix for thi...

PT-2024-26221 · Themeboy · Sportspress

Name of the Vulnerable Software and Affected Versions: SportsPress – Sports Club & League Manager versions 2.7.20 and earlier Description: The issue is related to a Missing Authorization vulnerability in the ThemeBoy SportsPress – Sports Club & League Manager plugin. Recommendations: For versions...

PT-2024-4340 · Trend Micro · Trend Micro Vpn Proxy One Pro

Name of the Vulnerable Software and Affected Versions: Trend Micro VPN Proxy One Pro versions 5.8.1012 and below Description: The issue is related to an arbitrary file overwrite or create attack, which can lead to a local Denial of Service DoS and, under specific conditions, elevation of...

PT-2024-27322 · Dell · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator versions 11.0.1.0 and prior Description: The issue is a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and...

PT-2024-23411 · Xlplugins · Xlplugins Finale Lite

Name of the Vulnerable Software and Affected Versions: XLPlugins Finale Lite versions through 2.18.0 Description: The issue is related to a Missing Authorization vulnerability in XLPlugins Finale Lite. This could potentially compromise data due to the lack of proper authorization checks...

PT-2024-26607 · Elementor · Master Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Master Addons for Elementor versions 2.0.5.4.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Jewel Theme Master Addons for Elementor. Recommendations: For Master Addons for Elementor versions...

PT-2024-20512 · Unknown · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support versions n/a through 6.1.6 Description: A Missing Authorization issue affects the Awesome Support software. This issue allows unauthorized access, potentially leading to data breaches or other security incidents. The estimated...

PT-2024-23895 · Unknown · Dfactory Responsive Lightbox

Name of the Vulnerable Software and Affected Versions: dFactory Responsive Lightbox versions through 2.4.6 Description: A Missing Authorization vulnerability has been identified in dFactory Responsive Lightbox. This issue may expose websites to unauthorized access. The estimated number of...

PT-2024-23396 · Wpdeveloper · Essential Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: Essential Blocks for Gutenberg versions 4.4.9 and earlier Description: The issue is a Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg. This allows for unauthorized access. Recommendations: For Essential Block...

PT-2024-14494 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.3 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.3, update to version 7.1....

PT-2024-21222 · Multivendorx · Product Catalog Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Catalog Enquiry for WooCommerce by MultiVendorX versions 5.0.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Product Catalog Enquiry for WooCommerce by MultiVendorX. Recommendations: For...

PT-2024-23466 · Wpclever · Wpc Badge Management For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPC Badge Management for WooCommerce versions 2.4.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce. This vulnerability allows unauthorized access due to...

PT-2024-25312 · Wzone · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions 14.0.10 and earlier Description: A Missing Authorization issue has been identified. This issue allows for unauthorized access. The estimated number of potentially affected devices is not specified. Recommendations: For versions...

PT-2024-26626 · Givewp · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP versions 3.12.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions 3.12.0 a...

PT-2024-26682 · Woocommerce · Active Products Tables For Woocommerce

Name of the Vulnerable Software and Affected Versions: Active Products Tables for WooCommerce versions 1.0.6.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. There...

PT-2024-26654 · Unknown · Wp Font Awesome

Name of the Vulnerable Software and Affected Versions: Block for Font Awesome versions 1.4.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS. Recommendations: For...