User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

Pet-Manager – Petfinder <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via kwm-petfinder Shortcode

kwmanagement Pet-Manager – Petfinder

WSChat – WordPress Live Chat <= 3.1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

elextensions WSChat – WordPress Live Chat

Booking Plugin for WordPress Appointments – Time Slot <= 1.4.7 - Unauthenticated Arbitrary Email Sending

timeslotplugins Booking Plugin for WordPress Appointments – Time Slot

Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure

ays-pro Quiz Maker ays-pro quiz_maker

Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger

icegram Email Subscribers & Newsletters – Powerful Email Marketing, Post Notification & Newsletter Plugin for WordPress & WooCommerce

YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename

yithemes YITH WooCommerce Wishlist

Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting

wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor

New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Juggling

saadiqbal New User Approve

YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion

yithemes YITH WooCommerce Wishlist

Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges

ASUSTOR ABP and AES

Tanium addressed an arbitrary file deletion vulnerability in TanOS.

Tanium TanOS tanium tanos

DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker t...

NEC Corporation RakurakuMusen Start EX

A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes wh...

lanol filecodebox

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBo...

lanol filecodebox

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers...

lanol filecodebox

Bridgetech probes 安全漏洞

bridgetech vb220_firmware bridgetech vb120_firmware +3个

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware v...

dasannetworks ds2924_firmware dasannetworks ds2924_firmware

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broke...

rvr tex30lcd\/s_firmware rvr tex50lcd\/s_firmware +9个

An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6.0-...

bridgetech vb288_firmware