CVE Vulnerability Catalog

Apache Calcite from version 1.5.0 before 1.42 has an Unsafe Reflection vulnerability. Externally-controlled input can be used to select classes or code, allowing remote code execution.

An improper authorization vulnerability has been identified in Apache Kafka. The CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the GROUP resource instead of the READ operation as documented. This can result in misconfigured ACLs and unintended security postures.

Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicious URL with JavaScript in the locale parameter and send it to a victim, executing the script in their browser.

Yandex Database prior to 25.3.1.25 has an LDAP filter injection vulnerability. A remote attacker with valid LDAP credentials can bypass group membership checks, leading to unauthorized database access.

Missing authorization in the Thim Core plugin (versions up to 2.3.3) allows exploiting incorrectly configured access control security levels.

Missing Authorization vulnerability in Anton Shevchuk Constructor allows accessing functionality not properly constrained by ACLs. This affects versions from n/a through 1.6.5.

Missing Authorization vulnerability in Printeers Printeers Print & Ship allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Printeers Print & Ship from n/a through 1.17.0.

The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0. Missing nonce validation in the gmz_comment_settings_save function allows unauthenticated attackers to modify the plugin's comment-display setting.

The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 0.0.2. Missing nonce validation in the googlePlusOneAdmin function allows unauthenticated attackers to modify plugin settings, including the plusone-lang, plusone-callback, and plusone-url options.

The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.2.5. Missing nonce validation in the addOptionsPageFields function allows unauthenticated attackers to update plugin settings, including the API key, tag blacklist, relevance threshold, batch size, and tagging toggles.

The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.3. Missing nonce validation in the admin_init function allows unauthenticated attackers to modify plugin settings, including the tectite_forms_button option.

The JTL-Connector for WooCommerce plugin up to version 2.4.1 has an authorization vulnerability. Missing capability checks and nonce verification in several admin actions allow authenticated attackers with Subscriber-level access or higher to modify plugin settings, download a ZIP archive of developer log files, and delete those files.

The DeMomentSomTres Shortcodes plugin for WordPress up to version 1.1.1 is vulnerable to Stored XSS via the 'width' and 'align' attributes in the 'callout' shortcode. Attackers with contributor-level access can inject arbitrary scripts that execute when a page is visited.

The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.01. Missing nonce validation on the 'remove-meta-boxes-per-user-role' page allows unauthenticated attackers to modify or reset the plugin's per-role meta box visibility settings.

The ZeM STL plugin for WordPress up to version 1.0 has a Stored XSS vulnerability via the [zemstl] shortcode. The 'url', 'color', and 'bgcolor' attributes are not properly sanitized, allowing authenticated users (Contributor+) to inject scripts.

The Easy Cart plugin for WordPress up to version 1.8 has a Stored XSS vulnerability via the 'add_to_cart' shortcode. The sanitize_text_field() function does not escape double quotes in attributes, allowing authenticated users (Contributor+) to inject scripts.

The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 2.2.0. Missing nonce validation in the birdseed_plugin_settings_page() function allows unauthenticated attackers to change the plugin's BirdSeed token setting by saving it to the database via update_option().

The Word Replacer plugin for WordPress is vulnerable to stored XSS via the 'replacement' parameter. All versions up to 0.4 are affected, requiring administrator access.

The hiWeb Migration Simple plugin for WordPress up to version 2.0.0.1 is vulnerable to Reflected Cross-Site Scripting (XSS) via the 'new_domain' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts that execute when an administrator clicks a link.

The FPW Category Thumbnails plugin for WordPress up to version 1.9.5 is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'fpw_fs_get_file' AJAX action. This is due to insufficient input sanitization and output escaping. Authenticated attackers with Subscriber-level access and above can inject arbitrary web scripts that execute when an administrator accesses the plugin's settings page.