CVE Vulnerability Catalog

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress up to version 1.4.14 contains a stored XSS vulnerability via the X-Forwarded-For header. An unauthenticated attacker can inject arbitrary JavaScript that executes whenever a user accesses the injected page. Note: practical exploitation is limited to 20 characters.

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

The All in One SEO plugin for WordPress up to version 4.9.7 exposes sensitive internal option data via 'internalOptions' localized script data passed to wp_localize_script() in post editor contexts. Lack of effective masking for low-privilege users allows authenticated attackers with Contributor-level access or higher to view configured API/OAuth tokens and license-related values from the page source.

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. Successful exploitation might lead to denial of service (DoS).

NVIDIA Triton Inference Server contains a path traversal vulnerability. An attacker can exploit this flaw, leading to denial of service (DoS).

NVIDIA TRT-LLM contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. Successful exploitation might lead to denial of service.

Deserialization vulnerability and unsafe serialized handle in NVIDIA TRT-LLM. Can lead to code execution, data tampering, and information disclosure.

Missing capability check in the get_content_editor function of the Xpro Addons plugin for WordPress allows unauthenticated attackers to create published Xpro templates.

The Infility Global plugin for WordPress is vulnerable to SQL injection via the 'orderby' and 'order' parameters in versions up to and including 2.15.16. This is due to insufficient escaping and lack of proper SQL query preparation in the show_control_data::post_list() function. Authenticated attackers with Subscriber-level access or higher can append additional SQL queries to extract sensitive database information.

The Correct Prices plugin for WordPress up to version 1.0 contains a reflected XSS vulnerability via the $_SERVER['PHP_SELF'] variable. The correct_pages_page() function echoes this variable into a form's action attribute without sanitization, allowing an unauthenticated attacker to inject arbitrary JavaScript.

The SponsorMe plugin for WordPress up to version 0.5.2 is vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts that execute if a user clicks a crafted link.

The LJ comments import: reloaded plugin for WordPress up to version 0.97.1 is vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts that execute if a user clicks a crafted link.

The TypeSquare Webfonts for ConoHa plugin for WordPress up to version 2.0.4 is vulnerable to authorization bypass. It does not properly verify that a user is authorized to perform an action, allowing authenticated attackers with Subscriber-level access or higher to modify the plugin's site-wide font settings, including typesquare_auth, show_post_form, and typesquare_fonttheme, by submitting a POST request to any wp-admin page. For fontThemeUseType values 1 and 3, no nonce verification is performed either, making those branches additionally exploitable via CSRF.

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0. Missing nonce validation on the 'rybb_api_settings' page allows unauthenticated attackers to reset plugin settings via a forged request, provided they trick a site administrator into clicking a link.

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 2.0.5. Missing nonce validation on the options page allows unauthenticated attackers to change the site's active theme by modifying the jbct_theme option via a forged request, provided they trick a site administrator into clicking a link.

The WordPress plugin BLOGCHAT Chat System up to version 1.3.6.3 is vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on a function. This allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request if they can trick a site administrator into clicking a link.

Missing nonce validation in Amazon Scraper plugin for WordPress (up to 1.1) allows CSRF attacks, enabling unauthenticated attackers to update settings and inject malicious scripts.

The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 1.2.0. Missing nonce validation in the gc_crud() function for the delete action via GET request allows unauthenticated attackers to delete arbitrary game catalog entries (including associated WordPress posts) via a forged request, provided they trick an administrator into clicking a link.

Stored XSS vulnerability in the 'facesofusers' shortcode of the Faces of Users plugin for WordPress allows authenticated attackers (Contributor-level and above) to inject arbitrary web scripts.

The Read More & Accordion plugin for WordPress up to version 3.5.7 is vulnerable to time-based blind SQL injection via the 'orderby' parameter. This is due to the use of esc_sql() without quotes in an ORDER BY clause, allowing authenticated attackers with administrator access (or appropriate role) to inject SQL expressions like (SELECT SLEEP(5)).