Archive
6 February 2023
Vulnerabilities first published on this day (UTC), newest first.
142 results · Clear filters · Feed
-
Medium 5.4
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode
The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
WP VR < 8.2.7 - Contributor+ Stored XSS
The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-…
-
Medium 5.4
YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode
The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS
The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above…
-
Medium 5.4
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored …
-
Medium 5.4
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cr…
-
Medium 5.4
WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode
The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attac…
-
Medium 5.4
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks…
-
Medium 5.4
Annual Archive < 1.6.0 - Contributor+ Stored XSS
The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stor…
-
Medium 6.7
Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows b…
-
Medium 6.0
Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Tool…
-
Medium 5.0
SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects the function update_cart of the file /oews/classes/Master.php?f=update_cart of the component HTTP POST Request Handler. The manipulation of t…
-
Medium 5.4
0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromk_options_page function. This makes it possible for unauthenticated atta…
-
Medium 4.3
paxswill EVE Ship Replacement Program User Information api.py information disclosure
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to i…
-
Medium 5.0
SourceCodester Canteen Management System removeUser.php sql injection
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack m…
-
Medium 4.7
WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Afterpay Gateway for WooCommerce <= 3.5.0 versions.
-
Medium 4.7
WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions.
-
Medium 5.5
In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 6.3
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.5
In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to loca…
-
Medium 5.0
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.7
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 5.7
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
-
Medium 4.8
In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no addit…
-
Medium 6.4
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 6.4
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 5.7
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 5.7
In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial o…
-
Medium 5.5
In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to lo…
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local In wlan driver, information disc…
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 6.4
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 6.4
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 5.5
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 6.4
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 6.4
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
-
Medium 6.4
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.