CVE Vulnerability Catalog

Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.

HCL BigFix Service Management is affected by an insecure communication vulnerability that allows an attacker with internal network access to intercept unencrypted HTTP traffic between backend services. This enables the extraction of sensitive data and potential man-in-the-middle attacks.

The WP Full Stripe Free plugin in versions up to 8.5.6 contains a Broken Access Control vulnerability exploitable by an unauthenticated attacker. Missing access controls allow unauthorized access to functions or data.

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject and store malicious scripts within the application. These scripts execute when a victim views the affected page, enabling session hijacking and theft of sensitive data.

A vulnerability has been found in rhukster dom-sanitizer up to version 1.0.15. The affected element is the url function in src/DOMSanitizer.php of the SVG Sanitization component. Manipulation leads to an incomplete blacklist, allowing remote exploitation. The exploit has been publicly disclosed and may be used.

The ByteCoreStack – MCP Connector for AI Tools plugin in versions up to 1.2.2 contains a Subscriber Privilege Escalation vulnerability. A low-privileged user can gain higher privileges within the application.

The Parallax Section block in versions up to 2.0.4 contains a Cross-Site Scripting (XSS) vulnerability exploitable by an unauthenticated attacker. Lack of proper input sanitization allows injection of malicious code.

The Photo Reviews for WooCommerce plugin in versions up to 1.2.30 contains an Insecure Direct Object References (IDOR) vulnerability exploitable by an unauthenticated attacker. Missing access controls allow access to objects the user should not be authorized to access.

The REST API Log plugin in versions up to 1.7.2 contains an Insecure Direct Object References (IDOR) vulnerability exploitable by an unauthenticated attacker. Missing access controls allow access to objects the user should not be authorized to access.

Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.html endpoint. Attackers can supply directory traversal sequences such as path=/manual/../../../<path> to access files outside the intended manual directory, including /etc/passwd, coredump files containing credentials, and system configuration files.

iControl is affected by a Broken Access Control vulnerability that allows an attacker to exploit missing authentication checks or insecure direct object references (IDOR). This enables privilege escalation and unauthorized modification or deletion of sensitive application data.

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks raw_datachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large count requests an excessive allocation. When it fails, Imager's allocator calls exit(3). Passing an untrusted raw_datachannels value to Imager->read() triggers an uncatchable exit.

The Captivate Sync (captivatesync-trade) WordPress plugin contains an SQL Injection (Blind SQL Injection) vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 3.3.2.

The Ultimate Member WordPress plugin is vulnerable to SQL Injection (Blind SQL Injection) due to improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 2.13.1.

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin contains an SQL Injection (Blind SQL Injection) vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 2.0.20.

The Memberful - Membership Plugin (memberful-wp) for WordPress is vulnerable to Cross-Site Request Forgery (CSRF). The issue affects versions from n/a through 1.81.0.

The BuildKit – Product Builder for WooCommerce – Custom PC Builder (woo-product-builder) plugin contains an SQL Injection (Blind SQL Injection) vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 1.0.28.