PT-2024-30469 · Fonts · Fonts

Name of the Vulnerable Software and Affected Versions: Fonts versions through 3.7.7 Description: The issue is related to a Missing Authorization vulnerability in the Fonts Plugin, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-30842 · Cozythemes · Cozythemes Blockbooster

Name of the Vulnerable Software and Affected Versions: CozyThemes Blockbooster versions 1.0.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For CozyThemes Blockbooste...

PT-2024-30392 · Unknown · Wp Search Analytics

Name of the Vulnerable Software and Affected Versions: WP Search Analytics versions 1.4.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Search Analytics...

PT-2024-30308 · Unknown · Typesquare Webfonts

Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...

Important: qt5-qtcanvas3d

Issue Overview: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not ye...

PT-2024-27440 · Unknown · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro versions n/a through 3.0.4 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: Fo...

PT-2024-27419 · WordPress · Wpmet Elements Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Wpmet Elements kit Elementor addons versions 3.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means...

PT-2024-32526 · WordPress · Wp Sunshine Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart versions 3.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For WP...

PT-2024-30479 · Woocommerce · Wpc Frequently Bought Together

Name of the Vulnerable Software and Affected Versions: WPC Frequently Bought Together for WooCommerce versions prior to 7.1.9 Description: The issue affects the WPC Frequently Bought Together for WooCommerce plugin due to a Missing Authorization vulnerability. This vulnerability allows for the...

PT-2024-32957 · Cubewp · Cubewp

Name of the Vulnerable Software and Affected Versions: CubeWP – All-in-One Dynamic Content Framework versions 1.1.15 and earlier Description: The issue affects the CubeWP – All-in-One Dynamic Content Framework due to a Missing Authorization vulnerability. This vulnerability allows for the...

PT-2024-30378 · Unknown · Creativemotion Social Slider Feed

Name of the Vulnerable Software and Affected Versions: creativemotion Social Slider Feed versions through 2.2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-16245 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 5.0.13 Description: The issue is related to a missing capability check on the ajax search users function, allowing authenticated attackers with Subscriber-level access and...

PT-2024-16124 · WordPress · Wp Team – Wordpress Team Member Plugin

Name of the Vulnerable Software and Affected Versions: WP Team – WordPress Team Member Plugin versions up to, and including, 1.1.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's htteamember shortcode due to insufficient input sanitization and output escaping on...

PT-2024-33271

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.13.0 Description A kyverno ClusterPolicy can be overridden by the creation of a PolicyException in a random namespace. By design, PolicyExceptions are consumed from any namespace, which may allow users with privileg...

PT-2024-34199 · Roland Murg · Wp Booking System

Name of the Vulnerable Software and Affected Versions: WP Booking System versions 2.0.19.10 and earlier Description: The issue affects the exposure of sensitive system information to an unauthorized control sphere in the Veribo, Roland Murg WP Booking System. Recommendations: For WP Booking Syste...

PT-2024-16096 · WordPress · Newsletters

Name of the Vulnerable Software and Affected Versions: Newsletters plugin for WordPress versions up to, and including, 4.9.9.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's newsletters video shortcode due to insufficient input sanitization and output escaping o...

PT-2024-34196 · Cloudways · Cloudways Breeze

Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions 2.1.14 and earlier Description: The issue is related to a Missing Authorization vulnerability in Cloudways Breeze, which allows exploitation due to incorrectly configured access control security levels...

PT-2024-34184 · Unknown · Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions through 2.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions...

PT-2024-34195 · Wp Overnight · Woocommerce Pdf Invoices & Packing Slips

Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices & Packing Slips versions 3.8.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips, which allows exploiting incorrectly...

PT-2024-34180 · Unknown · Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions through 2.6.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For versions...