PT-2023-30477 · Unknown · Category Posts Widget

Name of the Vulnerable Software and Affected Versions: Category Post List Widget versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the Category Post List Widget. Recommendations: For versions n/a through 2....

PT-2023-24854 · Unknown · Kebo Twitter Feed

Name of the Vulnerable Software and Affected Versions: Kebo Twitter Feed plugin versions prior to 1.5.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-21262 · WordPress · Jens Törnell Wp Page Numbers

Name of the Vulnerable Software and Affected Versions: Jens Törnell WP Page Numbers plugin versions = 0.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-22215 · WordPress · Whydonate

Name of the Vulnerable Software and Affected Versions: Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin versions = 3.12.15 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a use...

SUSE-SU-2023:4415-1 Security update for clamav

This update for clamav fixes the following issues: - Updated to version 0.103.11: - CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 bsc1216625...

PT-2023-30381 · Webberzone · Webberzone Top 10 – Wordpress Popular Posts

Name of the Vulnerable Software and Affected Versions: WebberZone Top 10 – WordPress Popular posts by WebberZone plugin versions = 3.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into...

PT-2023-30615 · Natus +1 · Natus Neuroworks +2

Name of the Vulnerable Software and Affected Versions: Natus NeuroWorks and SleepWorks versions prior to 8.4 GMA3 Description: The issue arises from the use of a default password xltek for the Microsoft SQL Server service sa account in Natus NeuroWorks and SleepWorks. This allows a threat actor t...

PT-2023-23143 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager plugin versions = 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...

PT-2023-23897 · WordPress · Sunny Search

Name of the Vulnerable Software and Affected Versions: Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin versions = 1.0.2 Description: A Cross-Site Request Forgery CSRF issue affects the specified plugin, allowing unauthorized actions to be performed on behalf of a user without thei...

PT-2023-23709 · Unknown · Kathy Darling Simple User Listing

Name of the Vulnerable Software and Affected Versions: Kathy Darling Simple User Listing plugin versions = 1.9.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices...

PT-2023-28414 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startEmailValidationActivity function within Samsung Account. This allows attackers to access arbitrary...

PT-2023-32459 · WordPress · Updraftplus

Name of the Vulnerable Software and Affected Versions: UpdraftPlus: WordPress Backup & Migration Plugin versions up to, and including, 1.23.10 Description: The issue is related to Cross-Site Request Forgery due to a lack of nonce validation and insufficient validation of the instance id on the...

PT-2023-15047 · Unknown · Simple Newsletter Plugin – Noptin

Name of the Vulnerable Software and Affected Versions: Simple Newsletter Plugin – Noptin versions 1.9.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Simple Newsletter Plugin – Noptin. Recommendations: For version...

PT-2023-30344 · Unknown · Linker Plugin

Name of the Vulnerable Software and Affected Versions: Linker plugin versions prior to 1.2.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 1.2.1, update to a version...

PT-2023-29388 · WordPress · The Video Gallery – Best Wordpress Youtube Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Video Gallery – Best WordPress YouTube Gallery Plugin versions prior to 2.1.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

PT-2023-30207 · Unknown · Thefreewindows Auto Limit Posts Reloaded

Name of the Vulnerable Software and Affected Versions: TheFreeWindows Auto Limit Posts Reloaded plugin versions = 2.5 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations...

PT-2023-30351 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin versions 7.6.11 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can the...

PT-2023-30211 · WordPress · Roland Murg Current Menu Item For Custom Post Types

Name of the Vulnerable Software and Affected Versions: Roland Murg Current Menu Item for Custom Post Types plugin versions = 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-30210 · Alter · Alter

Name of the Vulnerable Software and Affected Versions: Alter plugin versions = 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. No...

PT-2023-32357 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.2 through 16.3.5 GitLab CE/EE versions 16.4 through 16.4.1 GitLab CE/EE versions 16.5 through 16.5.0 Description: A low-privileged attacker can point a CI/CD Component to an incorrect path, causing the server to exhau...