Versa SASE Client for Windows 安全漏洞

Versa Networks SASE Client for Windows

WP JobHunt <= 7.7 - Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status'

未知

WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference

未知

FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode

damian-gora FiboSearch – Ajax Search for WooCommerce

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.11.0 - Unauthenticated Sensitive Information Exposure

ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation

CMSSuperHeroes Flex Store Users

WordPress plugin Pure WC Variation Swatches 安全漏洞

Unknown Pure WC Variation Swatches

WP Hallo Welt <= 1.4. - Cross-Site Request Forgery to Stored Cross-Site Scripting

tikolan WP Hallo Welt

Attachments Handler <= 1.1.7 - Reflected Cross-Site Scripting

kaizencoders Attachments Handler

File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data

snowray File Uploader for WooCommerce

WP DB Booster <= 1.0.1 - Cross-Site Request Forgery to Database Cleanup

wpmaniax WP DB Booster

Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

travishoki Overstock Affiliate Links

F70 Lead Document Download <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Media File Download

niao70 F70 Lead Document Download

Responsive and Swipe slider <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode

mansoormunib RESPONSIVE AND SWIPE SLIDER!

Pretty Google Calendar <= 2.0.0 - Missing Authorization to Unauthenticated Google API Key Exposure

lbell Pretty Google Calendar

Amazon affiliate lite Plugin <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update

nestornoe Amazon affiliate lite Plugin

Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update

edckwt Quran Gateway

Amazon affiliate lite Plugin <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

nestornoe Amazon affiliate lite Plugin

PII Leak Due to Change in EOR Handling

Perforce Delphix Continuous Compliance perforce delphix_continuous_compliance

Unauthenticated Access to connectAP API Endpoint on Tapo C200

TP-Link Systems Inc. Tapo C200 V3 tp-link tapo_c200_firmware +11个