CVE Vulnerability Catalog

The Booster for WooCommerce plugin in versions up to and including 8.4.0 contains a PHP Object Injection vulnerability exploitable by an unauthenticated attacker. The lack of required authorization allows exploitation without an account.

The Payever - WooCommerce Gateway plugin in versions up to and including 4.8.2 contains a PHP Object Injection vulnerability exploitable by an unauthenticated attacker. The lack of required authorization allows exploitation without an account.

The WordPress plugin SiteVault – Backup, Restore, Migration & Cloning (up to version 1.5.19) contains a Code Injection vulnerability that allows Remote Code Inclusion. Improper control of code generation lets an attacker execute arbitrary code within the application context.

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin in versions up to and including 1.5.3 contains a SQL Injection vulnerability exploitable by a Subscriber-level user. Only a low-privileged account is required.

The AIWU plugin in versions up to and including 1.5.9 contains a privilege escalation vulnerability exploitable by a Subscriber-level user. Only a low-privileged account is required.

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation. This issue affects miniorange otp verification: from n/a through 5.5.7.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal. This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.

Blind SQL Injection vulnerability in the Tickera event ticketing system plugin. Improper neutralization of special elements in SQL commands allows an attacker to perform blind SQL injection. Affects versions up to 3.6.0.6.

Deserialization of untrusted data vulnerability in the AFFI – Affiliate Marketing for WooCommerce plugin. Allows an attacker to perform object injection. Affects versions up to 1.0.10.

Code injection vulnerability in openapi-typescript-codegen up to version 0.31.0. An attacker controlling an OpenAPI document can inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. This can be exploited by embedding a single quote in path keys, parameter names, servers[0].url, or info.version.

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl may read the SV length before stringifying the argument. Due to unspecified evaluation order in C++, some compilers may evaluate SvCUR on a non-string, leading to abort or segfault.

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking input length; in the compressed format the size check could be defeated by a 32-bit overflow. A crafted or truncated sketch could cause a read past the end of the input, potentially large in the compressed case, leading to a crash and memory exposure. Affects versions from 3.1.0 before 5.3.0.

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deserialize() can cause the decompressor to read past the end of compressed data, and in the hybrid flavor can cause a write outside an internal heap buffer due to unvalidated decoded row indices. This can corrupt heap memory, causing a crash and potentially enabling further exploitation. Affects versions from 2.0.0-incubating before 5.3.0.

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (datasketches-cpp). When deserializing a sketch in LIST mode, the coupon count was read from input and used as the number of entries to copy into a fixed buffer of 8 entries without checking capacity. A crafted sketch could cause a write of up to 988 bytes past the end of the internal heap buffer, corrupting memory. Affects versions from 1.0.0-incubating before 5.3.0.

Deserialization of Untrusted Data vulnerability in the Balance theme by Axiomthemes allows Object Injection. This issue affects Balance from n/a through 1.12.0.

Deserialization of Untrusted Data vulnerability in the Camelia theme by ThemeREX Group allows Object Injection. This issue affects Camelia from n/a through 1.2.15.

Deserialization of Untrusted Data vulnerability in the Convex theme by ThemeREX Group allows Object Injection. This issue affects Convex from n/a through 1.16.0.

Deserialization of Untrusted Data vulnerability in the Dwell theme by ThemeREX Group allows Object Injection. This issue affects Dwell from n/a through 1.16.0.

Deserialization of Untrusted Data vulnerability in the Edema theme by ThemeREX Group allows Object Injection. This issue affects Edema from n/a through 1.2.2.2.