Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions....
Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider master-slider allows Reflected XSS.This issue affects Master Slider: from n/a...
Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions....
Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity L...
Unauthenticated SQL Injection in Premmerce Wishlist for WooCommerce <= 1.1.11 versions....
Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExperts Square for WooCo...
Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions....
Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions....
Unauthenticated SQL Injection in MDTF <= 1.3.7 versions....
Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25....
Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions....
Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions....
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection. This issue affects YMC Filter: from n/a through 3.11.5....
Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions....
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Al...
Unauthenticated Broken Access Control in Motors <= 1.4.109 versions....
Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions....
Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions....
Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions....
Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail....
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has alr...
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remo...