2024

The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not validate and escape some of its shortcode attributes

The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which coul

The Similarity WordPress plugin through 3.0 does not have CSRF check in some places, and is missing sanitisation as well

The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could a

The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated

The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could

The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could all

The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which co

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via alb

Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through

The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not pr

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request

Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request

Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via th

Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page an

Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add

Attackers can bypass the web login authentication process to gain access to the printer's system information and upload

The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an a

The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrati

The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacke

The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacke

An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the refe

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism.

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name var

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID var

Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can r

Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combinatio

Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing e

Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, se

A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code

It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it

Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in

It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow at

Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local

Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. A

Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can g

Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL.

Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 speci

Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable

all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the enc

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt th

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt th

All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the r

The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retr

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication ses

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise a