CVE Vulnerability Catalog

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The WordPress plugin Backuply – Backup, Restore, Migrate and Clone (versions up to and including 1.4.8) is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functionality. An authenticated attacker with Administrator-level access or above can delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

The Markdown Shortcode plugin for WordPress (all versions up to 0.2.1) is vulnerable to stored XSS via the 'markdown' shortcode. Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to inject arbitrary web scripts.

The Snow Monkey theme for WordPress (versions up to and including 29.1.5) is vulnerable to Server-Side Request Forgery via the request() function. An unauthenticated attacker can force the application to make HTTP requests to arbitrary locations, including internal services.

The TweetThis Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tweetthis' shortcode in all versions up to, and including, 1.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to and including 1.20.6 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.

The Featured Image from URL (FIFU) plugin for WordPress up to version 5.2.7 lacks a capability check on the fifu_api_debug_posts() function, allowing unauthenticated attackers to read private and password-protected posts.

The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_posts_with_internal_featured_image() function in all versions up to and including 5.2.7, due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers with Administrator-level access and above to append additional SQL queries to existing ones, potentially extracting sensitive information from the database.

The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_all_urls() function in all versions up to and including 5.2.7, due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This allows authenticated attackers with Administrator-level access and above to append additional SQL queries to existing ones, potentially extracting sensitive information from the database.

The Mapster WP Maps plugin for WordPress (versions up to and including 1.20.0) is vulnerable to Stored Cross-Site Scripting via multiple fields due to insufficient input sanitization and output escaping. An authenticated attacker with contributor-level permissions and above can inject arbitrary web scripts into pages that will execute whenever a user accesses an injected page.

The Banhammer plugin for WordPress (up to version 3.4.8) has a blocking bypass vulnerability. A site-wide secret key is deterministically generated from a constant character set using md5() and base64_encode() and stored in the banhammer_secret_key option. This allows unauthenticated attackers to bypass logging and blocking by appending a GET parameter named banhammer-process_{SECRET} with a predictable value, causing Banhammer to abort protections for that request.

The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sd_toggle_logs() function. This makes it possible for unauthenticated attackers to toggle critical logging settings including Page Access Logs, Error Logs, and Email Delivery Logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Open Babel up to version 3.1.1 has a heap-based buffer overflow in the ChemKinFormat::CheckSpecies function in /src/formats/chemkinformat.cpp. The attack can only be executed locally.

Open Babel up to version 3.1.1 has a heap-based buffer overflow in the OBSmilesParser::ParseSmiles function in /src/formats/smilesformat.cpp. The attack requires local access.

The Widgets for Tiktok Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trustindex-feed' shortcode in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Mega Elements – Addons for Elementor plugin for WordPress in versions up to and including 1.3.2 is vulnerable to Stored Cross-Site Scripting (XSS) via the Countdown Timer widget. This is due to insufficient input sanitization and output escaping on user-supplied attributes.

A vulnerability was detected in Open Babel up to version 3.1.1 in the function zlib_stream::basic_unzip_streambuf::underflow in /src/zipstreamimpl.h. Manipulation leads to memory corruption. Local access is required, and the exploit has been publicly disclosed and may be used.

Open Babel through version 3.1.1 contains a use-after-free vulnerability in the GAMESSOutputFormat::ReadMolecule function in gamessformat.cpp. The attack can be launched locally and the exploit has been made publicly available.

A security flaw was discovered in MuYuCMS up to 2.7 affecting unknown functionality of the /admin.php file in the Template Management component. Manipulation results in code injection, and the attack can be launched remotely.