2024

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if th

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to cont

The Folders and Folders Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includi

Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Clien

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manage

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Si

Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows 

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.  Airflow did not return "Cac

Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availa

Vulnerability of insufficient permission verification in the NearLink module Impact: Successful exploitation of this vul

Memory management vulnerability in the boottime module Impact: Successful exploitation of this vulnerability can affect

Vulnerability of unauthorized screenshot capturing in the WMS module Impact: Successful exploitation of this vulnerabili

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom JS

The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which coul

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, whic

The SVGator WordPress plugin through 1.2.6 does not sanitize SVG file contents, which enables users with at least the a

The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the aut

The Social Pixel WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high

The AZAN Plugin WordPress plugin through 0.6 does not have CSRF check in some places, and is missing sanitisation as wel

The Amen WordPress plugin through 3.3.1 does not sanitise and escape some of its settings, which could allow high privil

The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not validate and escape some of its shortcode attributes

The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which coul

The Similarity WordPress plugin through 3.0 does not have CSRF check in some places, and is missing sanitisation as well

The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could a

The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated

The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could

The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could all

The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which co

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via alb

Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not pr

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request

Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.

The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacke

The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacke

An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the refe

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism.

Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can r

Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 speci

Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable

all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the enc

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt th

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt th

The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retr

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication ses

The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery i