CVE Vulnerability Catalog

The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.

Wtyczka Auto Thumbnailer dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu braku walidacji typu pliku w funkcji uploadThumb() we wszystkich wersjach do 1.0 włącznie. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie Contributor i wyżej przesyłanie dowolnych plików na serwer dotkniętej witryny.

Wtyczka Featured Image via URL dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu braku funkcji walidacji typu pliku we wszystkich wersjach do 0.1 włącznie. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie Contributor i wyżej przesyłanie dowolnych plików na serwer dotkniętej witryny.

The EPROLO Dropshipping plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wp_ajax_eprolo_delete_tracking and wp_ajax_eprolo_save_tracking_data AJAX endpoints in all versions up to and including 2.3.1. This allows authenticated attackers with Subscriber-level access and above to modify and delete tracking data.

The Hide Categories Or Products On Shop Page plugin for WordPress up to version 1.0.7 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save_data_hcps() function. This allows unauthenticated attackers to update plugin settings if they trick an administrator into clicking a link.

The FitVids for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Time Sheets plugin for WordPress up to version 2.1.3 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on several endpoints. This allows unauthenticated attackers to perform various actions if they trick an administrator into clicking a link.

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

The SSP Debug plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0. This is due to the plugin storing PHP error logs in a predictable, web-accessible location (wp-content/uploads/ssp-debug/ssp-debug.log) without any access controls. This makes it possible for unauthenticated attackers to view sensitive debugging information including full URLs, client IP addresses, User-Agent strings, WordPress user IDs, and internal filesystem paths.

The Norby AI plugin for WordPress up to version 1.0.3 is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the settings update functionality. This allows unauthenticated attackers to update plugin settings and inject malicious scripts if they trick an administrator into clicking a link.

Wtyczka CRM Memberships dla WordPressa jest podatna na eskalację uprawnień poprzez reset hasła we wszystkich wersjach do 2.6 włącznie. Brak odpowiednich kontroli autoryzacji i uwierzytelnienia w akcji AJAX `ntzcrm_changepassword` umożliwia nieautoryzowanym atakującym resetowanie haseł użytkowników.

The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' function in all versions up to and including 2.5. Unauthenticated attackers can create arbitrary membership tags and modify CRM configuration restricted to administrators.

The SurveyFunnel – Survey Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'surveyfunnel_lite_survey' shortcode in all versions up to and including 1.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute whenever a user accesses an injected page.

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, the risk detection mechanism may fail, allowing malicious applications to be installed without proper warning.

Wtyczka Demo Importer Plus dla WordPressa jest podatna na nieautoryzowane przesyłanie plików we wszystkich wersjach do 2.0.6 włącznie. Problem wynika z niewystarczającej walidacji typów plików, co pozwala na ominięcie sanitizacji przez pliki z podwójnymi rozszerzeniami, które są akceptowane jako ważne pliki WXR.

A vulnerability in the user interface of Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

A vulnerability has been found in youlaitech youlai-mall versions 1.0.0 and 2.0.0. The function getMemberById in /mall-ums/app-api/v1/members/ is affected. Manipulation of the argument memberId leads to improper access controls. The attack can be carried out remotely and the exploit is public.

Wersje Advantech iView 5.7.05.7057 i wcześniejsze nieprawidłowo sanitizują żądania SNMP v1 trap (port 162), co może umożliwić atakującemu wstrzyknięcie poleceń SQL.

A stored XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could execute arbitrary JavaScript code in the management interface of another user.

LaraDashboard w wersji 2.3.0 i wcześniejszych ma lukę w procesie resetowania hasła, który ufa nagłówkowi Host. To pozwala atakującym na przekierowanie tokena resetowania administratora do serwera kontrolowanego przez atakującego.