Medium - CVE-2024-11814 - The Additional Custom Order Status for...
The Additional Custom Order Status for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wfwp_wcos_delete_finished, wfwp_wcos_delete_fallback_finished,...
NA - CVE-2024-52276 - ** INITIAL LIMITED RELEASE **
User Interface...
** INITIAL LIMITED RELEASE ** User Interface (UI) Misrepresentation of Critical Information vulnerability in [WITHHELD] allows Content Spoofing.This issue affects [WITHHELD]: through 2024-12-04.
NA - CVE-2024-52277 - User Interface (UI) Misrepresentation of...
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.This issue affects DocuSeal: through 1.8.1, >1.8.1.
NA - CVE-2024-10576 - Infinix devices contain a pre-loaded...
Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with the receiver and force the device to...
Medium - CVE-2024-11854 - The Listdom – Business Directory and Classified...
The Listdom – Business Directory and Classified Ads Listings WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode’ parameter in all versions up to,...