PT-2024-23752 · Unknown · Pulsar Web Design Weekly Class Schedule

Name of the Vulnerable Software and Affected Versions: Pulsar Web Design Weekly Class Schedule versions through 3.19 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for Reflected...

PT-2024-23786 · 10Web · 10Web Map Builder For Google Maps

Name of the Vulnerable Software and Affected Versions: 10Web Map Builder for Google Maps versions 1.0.74 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. Recommendations: For versions...

PT-2024-17573 · WordPress · Elementskit Elementor Addons

Name of the Vulnerable Software and Affected Versions: ElementsKit Elementor addons plugin for WordPress versions up to, and including, 3.0.6 Description: The issue is related to Stored Cross-Site Scripting via the button ID parameter due to insufficient input sanitization and output escaping. Th...

PT-2024-23397 · WordPress · All-In-One-Wp-Security-And-Firewall

Name of the Vulnerable Software and Affected Versions: All In One WP Security & Firewall versions through 5.2.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2024-23442 · Unknown · Paid Memberships Pro – Payfast Gateway Add On

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro – Payfast Gateway Add On versions n/a through 1.4.1 Description: The issue is related to the insertion of sensitive information into log files. This could potentially expose sensitive data. Recommendations: For Paid...

PT-2024-23398 · Woocommerce · Wholesale For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wholesale For WooCommerce versions prior to 2.3.0 Description: A Missing Authorization issue has been identified. This issue allows unauthorized access, potentially leading to data breaches or other security incidents. The estimated number of...

PT-2024-2641 · Dji · Dji Matrice 300 +6

Name of the Vulnerable Software and Affected Versions: DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI...

PT-2024-23430 · Unknown · Everpress Mailster

Name of the Vulnerable Software and Affected Versions: EverPress Mailster versions n/a through 4.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject...

PT-2024-23380 · Unknown · Infinitum Form Geo Controller

Name of the Vulnerable Software and Affected Versions: INFINITUM FORM Geo Controller versions n/a through 8.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2024-23355 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions n/a through 21.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inje...

PT-2024-21029 · Castos · Castos Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Castos Seriously Simple Podcasting versions 3.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations...

PT-2024-23227 · Elementor · Exclusive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Exclusive Addons Elementor versions through 2.6.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2024-23063 · Unknown · Affiliate-Toolkit

Name of the Vulnerable Software and Affected Versions: affiliate-toolkit versions through 3.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...

PT-2024-22835 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-11289 Synology Surveillance Station versions prior to 9.2.0-9289 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used...

PT-2024-2579 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and Cisco IOS XE affected versions not specified Description: The issue is related to the incorrect handling of LISP packets, which could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in ...

PT-2024-23136 · Motopress · Motopress Stratum

Name of the Vulnerable Software and Affected Versions: MotoPress Stratum versions 1.3.15 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PT-2024-23291

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions 4.0.27 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecti...

PT-2024-19224 · Unknown · Seraphinite Accelerator

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator versions through 2.20.47 Description: The issue is related to the insertion of sensitive information into log files. Recommendations: For versions through 2.20.47, update to a version that contains a fix for this issue...

PT-2024-4253 · Synology · Synology Surveillance Station

Name of the Vulnerable Software and Affected Versions: Synology Surveillance Station versions prior to 9.2.0-9289 Synology Surveillance Station versions prior to 9.2.0-11289 Description: The issue is related to a missing authorization vulnerability in the System webapi component of Synology...

PT-2024-19902 · Kadence Blocks · Kadence Wp Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: Kadence WP Gutenberg Blocks versions through 3.2.19 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. It affects Kadence WP Gutenberg Blocks by Kadence Blocks. Recommendations: For versions through 3.2.19, update to ...