WordPress Patricia Blog theme <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Patricia Blog versions = 1.2...

CVE-2024-6054

The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'createpostattachmentfromurl' function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with contributor-level and above...

OPENSUSE-SU-2024:11054-1 mobidict-1.2-1.16 on GA media

These are all security issues fixed in the mobidict-1.2-1.16 package on the GA media of openSUSE Tumbleweed...

Apple visionOS Security Vulnerability

Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 1.2, which stems from processing web content that could result in a denial of service...

AZL-42540 CVE-2024-3049 affecting package booth for versions less than 1.2-1

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcrymdgetalgodlen, it may allow an invalid HMAC to be accepted by the Booth server...

PT-2024-26276 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A SQL Injection issue exists in the ofrs/admin/index.php script, allowing attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the...

PT-2024-23406 · Unknown · Cgc Maintenance Mode

Name of the Vulnerable Software and Affected Versions: CGC Maintenance Mode versions 1.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, allowing functionality bypass in CGC Maintenance Mode. Recommendations: For CGC Maintenance Mode versions 1...

WordPress Newsletter Popup Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Newsletter Popup Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3644 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7dd3456f2155 Credits Bob Matyas Required privile...

WordPress plugin Viet Affiliate Link 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress Visual Footer Credit Remover plugin <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by 1337Wannabe in WordPress Plugin Visual Footer Credit Remover versions = 1.2...

WordPress plugin Social Connect 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

E-TRUST Horacius 安全漏洞

E-TRUST Horacius is a comprehensive IAM system from E-TRUST Corporation. A security vulnerability exists in E-TRUST Horacius versions 1.0, 1.1, and 1.2 that originates from a vulnerability that allows a local attacker to escalate privileges via the password reset feature...

WordPress WP SMTP plugin 1.2 - 1.2.6 - Authenticated (Admin+) SQL Injection vulnerability

WordPress WP SMTP plugin 1.2 - 1.2.6 - Authenticated Admin+ SQL Injection vulnerability discovered by Christiaan Swiers YouGina in WordPress Plugin WP SMTP versions 1.2 - 1.2.6...

PT-2024-24561 · Unknown · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import Import Users from CSV versions 1.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which affects the Import Users from CSV functionality. Recommendations: For versions 1.2 and earlier, update ...

WordPress Import Users from CSV Plugin <= 1.2 is vulnerable to PHP Object Injection

Software Import Users from CSV Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-32431 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID e3f19c84ef38 Credits Trình Vũ Sonicrrrr from VNPT-VCI Require...

Floodlight 安全漏洞

Floodlight is a leading open source OpenFlow controller. A security vulnerability exists in Floodlight version v.1.2 that originated from allowing remote attackers to cause a denial of service DOS via the datapath id component...

PT-2024-24290 · WordPress · Aminur Islam Wp Login/Logout Redirect

Name of the Vulnerable Software and Affected Versions: Aminur Islam WP Login and Logout Redirect versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

PT-2024-23988 · Unknown · Sukhchain Singh Auto Poster

Name of the Vulnerable Software and Affected Versions: Sukhchain Singh Auto Poster versions 1.2 and earlier Description: The issue affects the Auto Poster, allowing for the unrestricted upload of files with dangerous types. Recommendations: For versions 1.2 and earlier, update to a version that...

WordPress Auto Poster plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by younsoung kim, SeoHyeon Lee, MyungJu Kim, SeoHee Kang in WordPress Plugin Auto Poster versions = 1.2...

WordPress Auto Poster Plugin <= 1.2 is vulnerable to Arbitrary File Upload

Software Auto Poster Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-31345 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 328c54e266f4 Credits younsoung kim, SeoHyeon Lee,...