‼ CVE-2023-36382 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <=Â 2.0.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39164 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin <= 4.6.19 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31220 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <=Â 2.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39162 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <=Â 3.5.0 versions.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-25465 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <=Â 7.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39918 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <=Â 1.6.01 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4614 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40206 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin <=Â 1.0.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39992 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita plugin <=Â 4.3.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40208 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aleksandar UroÅ¡evi? Stock Ticker plugin <= 3.23.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4616 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the current user.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39919 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin <= 2.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30494 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <=Â 3.1.10 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39987 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <=Â 2.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39991 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blindside Networks BigBlueButton plugin <=Â 3.0.0-beta.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37393 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4615 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the current user.📖 Read
via "National Vulnerability Database".
🕴 Realism Reigns on AI at Black Hat and DEF CON 🕴
📖 Read
via "Dark Reading".
Realistic expectations and caution began to replace wonder and confusion for generative AI at the recent security industry gatherings. 📖 Read
via "Dark Reading".
Dark Reading
Realism Reigns on AI at Black Hat and DEF CON
Realistic expectations and caution began to replace wonder and confusion for generative AI at the recent security industry gatherings.
‼ CVE-2023-4269 ‼
📖 Read
via "National Vulnerability Database".
The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40197 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <=Â 1.9.9 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30485 ‼
📖 Read
via "National Vulnerability Database".
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin <= 1.5.3 versions.📖 Read
via "National Vulnerability Database".