An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with re ...
Continue ReadingFebruary 28, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingFebruary 28, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingFebruary 28, 2023
The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the âtabâ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization a ...
Continue ReadingFebruary 28, 2023
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the listPostsCategory function in versions up to, and including, 4.5.3. This make ...
Continue ReadingFebruary 28, 2023
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This ...
Continue ReadingFebruary 28, 2023
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the saveSitemapSettings function in versions up to, and including, 4.5.3. ...
Continue ReadingFebruary 28, 2023
The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the setIgnore function ...
Continue ReadingFebruary 28, 2023
Back to Main