Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer CVE-2022-48627 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-526...

CVE-2024-38772

CVE-2024-38772 is a Path Traversal vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce. Affected: JetWidgets for Elementor and WooCommerce versions up to 1.1.7. Root cause: improper limitation of a pathname to a restricted directory, enabling PHP local file inclusion. Impact: pot...

CVE-2024-37217

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ProWCPlugins Empty Cart Button for WooCommerce allows Stored XSS.This issue affects Empty Cart Button for WooCommerce: from n/a through 1.3.8...

Malicious code in guilib-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 775d9ec7f3cfd0ff4f74cb2824da1d8a04578522705666f6fe09fbb28b545aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in guilib-wc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7430 Malicious code in guilib-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 775d9ec7f3cfd0ff4f74cb2824da1d8a04578522705666f6fe09fbb28b545aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24703

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

CVE-2024-24703 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

CVE-2024-24703 WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

PT-2024-20499

Name of the Vulnerable Software and Affected Versions WC Marketplace versions prior to 4.0.26 Description A Missing Authorization issue has been identified in MultiVendorX WC Marketplace. Recommendations For versions prior to 4.0.26, update to version 4.0.26 or later to resolve the issue...

WordPress plugin WC Marketplace security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-24703: Missing Authorization

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25...

CVE-2024-31304

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...

CVE-2024-31304

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...

CVE-2024-31304

CVE-2024-31304 describes a Missing Authorization vulnerability (Broken Access Control) in the WordPress plugin/DC WooCommerce MultiVendorX Marketplace, affecting WC Marketplace versions up to 4.1.3. Public records indicate high impact (C, I, A: High) with CVSS v3.1 base metrics showing network at...

CVE-2024-31304: Missing Authorization

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...

PT-2024-23952

Name of the Vulnerable Software and Affected Versions MultiVendorX WC Marketplace versions n/a through 4.1.3 Description The issue is related to a Missing Authorization vulnerability in MultiVendorX WC Marketplace. Recommendations For versions n/a through 4.1.3, update to a version later than 4.1...

WordPress plugin WC Marketplace security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-34765 WordPress Sensei Pro (WC Paid Courses) plugin <= 4.23.1.1.23.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sensei Sensei Pro WC Paid Courses allows Stored XSS.This issue affects Sensei Pro WC Paid Courses: from n/a through 4.23.1.1.23.1...

CVE-2024-34765 WordPress Sensei Pro (WC Paid Courses) plugin <= 4.23.1.1.23.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sensei Sensei Pro WC Paid Courses allows Stored XSS.This issue affects Sensei Pro WC Paid Courses: from n/a through 4.23.1.1.23.1...