CVE Vulnerability Catalog

Unlimited Elements For Elementor plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 2.0.20.

Site Reviews plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 8.3.2.

Metform plugin has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions up to 4.3.0.

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin contains an SQL Injection (Blind SQL Injection) vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 2.0.20.

The Memberful - Membership Plugin (memberful-wp) for WordPress is vulnerable to Cross-Site Request Forgery (CSRF). The issue affects versions from n/a through 1.81.0.

ElementsKit Elementor addons Lite plugin has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions up to 4.0.6.

The ElementsKit Elementor addons Lite plugin for WordPress contains a Stored XSS vulnerability in versions up to and including 4.0.6. An attacker can inject malicious script that will execute in the browser of an administrator or other user.

The Essential Addons for Elementor plugin for WordPress contains a Stored XSS vulnerability in versions up to and including 6.8.4. An attacker can inject malicious script that will execute in the browser of an administrator or other user.

The AFFI – Affiliate Marketing for WooCommerce plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.0.9. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.

The Majestic Support plugin for WordPress contains an Authorization Bypass Through User-Controlled Key vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized access to resources.

The Majestic Support plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.

The BuildKit – Product Builder for WooCommerce – Custom PC Builder (woo-product-builder) plugin contains an SQL Injection (Blind SQL Injection) vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects versions from n/a through 1.0.28.

Apache APISIX versions 3.12.0 through 3.18.0 contain an improper authentication vulnerability in the openid-connect plugin. A token that is active for one issuer may be accepted on a route restricted to another issuer when remote introspection is used.

Apache APISIX versions 2.14.1 through 3.18.0 contain a vulnerability in the use of non-canonical URL paths for authorization decisions. In some configurations where a permissive route overlaps a protected one, a crafted encoded path can reach an upstream endpoint that the matched route's policies were never meant to cover, allowing unauthenticated access.

The batch-requests plugin in Apache APISIX allows allocation of resources without limits or throttling. An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. The issue affects Apache APISIX from 1.3.0 through 3.18.0.

Cross-Site Request Forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that user's browser session on a protected route to be established under the attacker's identity instead of their own. Any work the user then performs in that session, including uploads, form submissions, and account bindings, lands in the attacker's account. Affects Apache APISIX from 3.17.0 through 3.18.0.

Apache APISIX versions 3.17.0 through 3.18.0 contain an improper verification of cryptographic signature vulnerability in the saml-auth plugin. An unauthenticated attacker can impersonate any user on routes protected by this plugin under default configuration.

MISP before version 2.5.48 contains an incomplete authorization check in the discussion posting functionality. An authenticated user outside the sharing group or without visibility on the associated event can read the thread title and quoted post content, and submit new posts into the thread, to which they are not authorized.

ansible-runner contains a vulnerability in the unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the transmit/worker protocol. The function re-creates symbolic links without validating the link target and applies chmod() and utime() to an unsanitized filesystem path derived from the archive member name. A crafted archive can create files, symbolic links, or change permissions outside the intended target directory, which can be leveraged toward code execution.

A heap-based buffer overflow exists in the tnef library's find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted TNEF file with an excessive number of colliding attachment filenames, causing the numeric counter to write past the allocated memory buffer.