CVE Vulnerability Catalog

Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This issue affects Apache Geode: versions 1.10 through 1.15.1.

The Related Posts Lite plugin for WordPress up to version 1.12 is vulnerable to Stored Cross-Site Scripting via admin settings. Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts that execute when a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Wtyczka Theme Editor dla WordPressa jest podatna na atak typu Cross-Site Request Forgery we wszystkich wersjach do i włącznie z 3.0. Problem wynika z braku lub nieprawidłowej walidacji nonce na stronie 'theme_editor_theme'.

Wykryto podatność w sterowniku Nixdorf Wincor PORT IO do wersji 1.0.0.1, która dotyczy funkcji sub_11100 w bibliotece wnport.sys. Manipulacja ta prowadzi do przepełnienia bufora na stosie, wymagając lokalnego dostępu do systemu.

The Kognetiks Chatbot plugin for WordPress up to version 2.3.5 is vulnerable to unauthorized data modification due to missing capability checks in several functions. This allows unauthenticated attackers to upload limited safe files and erase conversations.

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the mo_epbr_admin_observer() function hooked on 'init'. This makes it possible for unauthenticated attackers to access sensitive Azure AD user information including PII and detailed OAuth error data.

The Redirection for Contact Form 7 plugin for WordPress up to version 3.2.6 is vulnerable to Stored Cross-Site Scripting via the qs_date shortcode. Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access or higher to inject arbitrary web scripts that execute when a user accesses an injected page.

The WPC Smart Quick View for WooCommerce plugin for WordPress, up to version 4.2.5, is vulnerable to information exposure via the 'woosq_quickview' AJAX endpoint. Insufficient restrictions allow unauthenticated attackers to extract data from password-protected, private, or draft products.

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cache Poisoning in all versions up to and including 9.0.48. This is due to the plugin not serving cached data from server-side responses and instead relying on user-input. This makes it possible for unauthenticated attackers to poison the cache location for location search results.

Wtyczka PPOM – Product Addons & Custom Fields dla WooCommerce w WordPressie jest podatna na atak typu SQL Injection poprzez funkcję PPOM_Meta::get_fields_by_id() w wersjach do 33.0.15 włącznie, z powodu niewystarczającego zabezpieczenia parametrów dostarczanych przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL. Atakujący mogą dodawać dodatkowe zapytania SQL do już istniejących, co pozwala na wydobycie wrażliwych informacji z bazy danych.

The Optimole plugin for WordPress up to version 4.1.0 is vulnerable to Insecure Direct Object Reference (IDOR) in the /wp-json/optml/v1/move_image REST API endpoint due to missing validation on a user-controlled key. This allows authenticated attackers with Author-level access or above to offload media that doesn't belong to them.

Wtyczka Event Tickets and Registration dla WordPressa jest podatna na obejście płatności we wszystkich wersjach do 5.26.5 włącznie. Problem wynika z braku weryfikacji, czy dany typ biletu powinien być darmowy, co pozwala użytkownikom na ominięcie płatności.

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function in all versions up to, and including, 6.4.9. This makes it possible for authenticated attackers, with author-level access and above, to reset all of the plugin's configuration data.

Wtyczka PPOM – Product Addons & Custom Fields dla WooCommerce w WordPressie jest podatna na nieautoryzowane przesyłanie plików z powodu braku walidacji typu pliku w funkcjonalności przycinania obrazów we wszystkich wersjach do 33.0.15 włącznie. Umożliwia to nieautoryzowanym atakującym przesyłanie dowolnych plików na serwer dotkniętej witryny.

The LearnPress WordPress LMS Plugin up to version 4.2.9.2 is vulnerable to data modification due to missing capability checks on Admin Tools REST endpoints, which have permission_callback set to __return_true. This allows unauthenticated attackers to perform destructive database operations, including dropping indexes on any table (including WordPress core tables), creating duplicate configuration entries, and degrading site performance.

The Gutenberg Essential Blocks – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to and including 5.7.1 due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts.

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' parameter in all versions up to, and including, 3.17.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rev_slider_vc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This is only exploitable when RevSlider is also installed.

The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxp_fb2wp_display_embed' shortcode in all versions up to and including 1.9.9. This is due to improper sanitization of user input and output of the 'post_id' parameter.

The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wishlist_quickview' AJAX action in all versions up to, and including, 5.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's wishlist data and information.