CVE Vulnerability Catalog

TCL 65C655 Smart TV running firmware V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+) is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) via the UPnP MediaRenderer service (AVTransport:1). The device accepts unauthenticated SetAVTransportURI SOAP requests over TCP/16398 and attempts to retrieve externally referenced URIs, including attacker-controlled payloads. The blind SSRF allows requests on behalf of the TV, which can be leveraged to probe other internal or external services.

Podatność związana z użyciem twardo zakodowanych poświadczeń w oprogramowaniu TigerWings ERP firmy Logo Software Inc. umożliwia odczyt wrażliwych stałych w obrębie pliku wykonywalnego. Problem dotyczy wersji TigerWings ERP od 01.01.00 do przed 3.03.00.

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the reset_plugin function. Unauthenticated attackers can reset the plugin's optimization settings via a forged request if they trick a site administrator into clicking a link.

The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function, allowing unauthenticated attackers to create or modify background sliders via a forged request if they can trick a site administrator into clicking a link.

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. Unauthenticated attackers can empty the subscriber list via a forged request if they trick a site administrator into clicking a link.

The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1. This is due to missing or incorrect nonce validation on the update() function, allowing unauthenticated attackers to update plugin settings via a forged request if they can trick an administrator into performing an action.

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmx_activate_connection function. Unauthenticated attackers can bind their own ContentMX connection via a forged request if they trick a site administrator into clicking a link.

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. Unauthenticated attackers can delete arbitrary posts via a forged request if they trick a site administrator into clicking a link.

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. Unauthenticated attackers can update settings and inject malicious web scripts via a forged request if they trick a site administrator into clicking a link.

The Ird Slider plugin for WordPress up to version 1.0.2 is vulnerable to Stored Cross-Site Scripting via the 'irdslider' shortcode due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access can inject scripts.

The Event Tickets, RSVPs, Calendar plugin for WordPress up to version 1.0.2 is vulnerable to Stored Cross-Site Scripting via the 'ticket_spot' shortcode due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access can inject scripts.

The Fintelligence Calculator plugin for WordPress up to version 1.0.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the 'fintelligence-calculator' shortcode due to insufficient input sanitization and output escaping on user supplied attributes. Authenticated attackers with contributor-level access can inject arbitrary web scripts that execute when a user accesses an injected page.

The Auto Bulb Finder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'abf_vehicle' shortcode in all versions up to and including 2.8.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts that execute when a user visits an affected page.

The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The WP SinoType plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the sinotype_config function. Unauthenticated attackers can modify typography settings via a forged request if they trick a site administrator into clicking a link.

The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 1.4 due to insufficient input sanitization and output escaping. Authenticated attackers with editor-level access can inject arbitrary web scripts that execute when a user visits an affected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 1.1.1 due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level permissions and above can inject arbitrary web scripts that execute when a user visits an affected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 2.6 due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level permissions and above can inject arbitrary web scripts that execute when a user visits an affected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

The Meks Easy Maps plugin for WordPress up to version 2.1.4 is vulnerable to Stored Cross-Site Scripting via the post title field due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access can inject scripts.

The X Addons for Elementor plugin for WordPress up to version 1.0.16 is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID field due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access can inject scripts.