Effekseer contains a vulnerability where it improperly validates "effect" files. Loading a specially crafted effect file can cause the host process to crash, resulting in a denial of service condition.
The GemBooking WordPress plugin versions before 1.7.1 contain a vulnerability where REST requests are not properly verified to belong to the plugin's own routes. This flaw allows users assigned the Staff role to temporarily gain administrative capabilities, enabling them to delete arbitrary posts and modify site settings.
A path traversal vulnerability has been identified in SS1 and SS1 Cloud products by DOS Co., Ltd., as well as the ODM product rocoeyes by Rococo Co. Ltd. This vulnerability allows an attacker to delete arbitrary files on the affected systems. The vulnerability has a medium severity rating with a CVSS score of 5.3. No specific affected versions or patches have been disclosed yet.
The Advanced Appointment Booking & Scheduling WordPress plugin versions before 2.7 contain a vulnerability where the plugin does not check the site's user-registration setting before allowing account creation via a publicly accessible shortcode. This flaw enables unauthenticated attackers to register arbitrary user accounts and be automatically logged in, even if user registration is disabled on the site.
A vulnerability in chenyme grok2api up to version 3.1.6 affects the beginSelectionSession function in the Video Job Retry Handler component. This flaw allows improper authorization, enabling remote attackers to exploit the issue. The vulnerability has a CVSS score of 6.3 (medium severity). A fix is available in version 3.1.7, and upgrading is recommended to resolve the issue.
The WooCommerce Stripe Payment Gateway WordPress plugin versions before 11.1.0 improperly stored customer account passwords in plaintext within order metadata during express checkout. This exposure affects passwords chosen by customers when creating accounts at checkout, making them accessible to anyone with database or order data access. Version 10.9.0 stored passwords, 10.9.1 stopped storing new passwords but retained existing ones, and 11.1.0 removes stored passwords on update. Passwords stored in this manner should be considered compromised.
The Vigilant WordPress plugin versions before 2.11.0 fail to enforce two-factor authentication (2FA) on login forms other than the default WordPress login form. This allows an attacker who has obtained a user's password to bypass the second authentication factor and gain access to the user's account.
A security vulnerability in the Pantum BP5100DW printer firmware version 3.A.4.7 affects the web interface component, specifically the /shtml/omDB.shtml file. This flaw allows remote attackers to bypass authentication, potentially granting unauthorized access. The vendor has not responded to the disclosure, and no patch or remediation information is available. The vulnerability has a CVSS score of 5.3, indicating a medium severity level.
A path traversal vulnerability exists in the CatalogueController.upload function of DataLinkDC dinky versions up to 1.2.5. This vulnerability allows remote attackers with limited privileges to manipulate file paths, potentially leading to limited integrity and availability impacts. The issue was reported by a researcher who submitted a GitHub Security Advisory (GHSA) for the project.
A vulnerability in Logseq versions 2.0.1 and 2.0.2 affects the validate-auth-token function in the Local HTTP API component, resulting in missing authentication. This flaw can be exploited remotely without privileges or user interaction. Public exploit code exists, but the vendor has not yet responded or issued a fix.
A critical authentication weakness exists in Intelbras SG 2404 PoE L2+ versions 1.00.70 and 1.00.72 in the Web Management Interface component. This flaw allows remote attackers to bypass authentication via manipulation of an unknown function in the /EXCU_SHELL file. Public exploit code is available. Upgrading to version 1.00.74 resolves the issue.
An insecure storage vulnerability exists in the SS1 product by DOS Co., Ltd., allowing sensitive information used by the product to potentially be obtained by unauthorized parties. The issue does not impact integrity or availability but may lead to confidentiality loss.
The Fusion Page Builder WordPress plugin versions prior to 1.7.1 contain a vulnerability where the plugin does not verify ownership of content before moving it to the trash. This flaw allows users with Contributor-level roles to trash arbitrary posts and pages or permanently delete them if the trash feature is disabled.
The Mail Debug for WooCommerce WordPress plugin up to version 1.3.0 lacks proper capability, authentication, and nonce checks on an email-logging action. This flaw allows unauthenticated users to access the full body of all emails sent by the site, including sensitive password-reset emails. Exploiting this vulnerability could enable an attacker to obtain reset keys and take over administrator accounts.
The Post Duplicator WordPress plugin versions before 3.0.18 contain a vulnerability that allows a site administrator on a multisite network, who is not a Super Admin, to overwrite arbitrary site options. This includes the ability to modify role definitions, potentially granting themselves network-management capabilities.
The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API plugin up to version 2.0 improperly handles administrator credentials by failing to prevent their disclosure to unauthenticated users and not correctly verifying authentication. This vulnerability allows unauthenticated attackers to obtain administrator credentials and gain full administrator access to the affected WordPress site.
The Limit Login Attempts Security WordPress plugin versions before 3.4.1 contains a vulnerability where the two-factor authentication (2FA) step is not properly confirmed before completing a login. This flaw allows an attacker who knows a user's password to bypass the second factor by sending a specially crafted request header that disrupts the 2FA process.
The Grand Job WordPress plugin versions up to 1.2.1 contain a vulnerability where the password reset code is not properly verified before allowing a password update. This flaw enables unauthenticated attackers to reset passwords for arbitrary accounts, including administrator accounts, potentially leading to full site takeover.
The All-in-One Video Gallery WordPress plugin versions before 5.1.1 do not verify if a video is password protected before serving it via its standalone player page and download link. This flaw allows unauthenticated users to access the media sources of videos that are intended to be password protected, including unlisted YouTube or Vimeo links and external file URLs.
The Limit Login Attempts Security WordPress plugin versions before 3.4.1 have a vulnerability where two-factor authentication (2FA) is not enforced on all password-authentication routes. This allows an attacker who already knows a user's password to bypass the second factor by authenticating through an alternative login interface, gaining access without completing 2FA.