Riasztások
2024. október 16.
Critical - CVE-2024-9634 - The GiveWP – Donation Plugin and Fundraising...
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input...
2024. október 16.
Medium - CVE-2024-9647 - The Kama SpamBlock plugin for WordPress is...
The Kama SpamBlock plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST values in all versions up to, and including, 1.8.2 due to insufficient input sanitization and...
2024. október 16.
Medium - CVE-2024-9649 - The WP ULike – The Ultimate Engagement Toolkit...
The WP ULike – The Ultimate Engagement Toolkit for Websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7.4. This is due to missing or...
2024. október 16.
Medium - CVE-2024-9652 - The Locatoraid Store Locator plugin for...
The Locatoraid Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST keys in all versions up to, and including, 3.9.47 due to insufficient input sanitization...
2024. október 16.
Medium - CVE-2024-9891 - The Multiline files upload for contact form 7...
The Multiline files upload for contact form 7 plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the...
2024. október 16.
NA - CVE-2024-10018 - Improper permission control in the mobile...
Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.