CVE Vulnerability Catalog

The Product Import Export for WooCommerce plugin in versions 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to reach internal services via redirects. Attackers can submit a .csv URL that returns an HTTP 302 redirect to an internal address, causing the server to fetch internal responses and return them as import data.

OmniRoute versions 3.8.0 before 3.8.52 contain an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys or oma_ access tokens to change the management password without the current password. Attackers can send POST requests to /api/settings/require-login to lock out the operator, take over dashboard login, or disable the login requirement entirely.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Reflected XSS. This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.1.7.

The Login with phone number plugin by Hamid Alinia contains a Weak Authentication vulnerability that allows Authentication Abuse. The issue affects versions from n/a through 1.8.78.

The BuddyPress plugin contains a Blind SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. The issue affects versions from n/a through 14.5.2.

The Motors plugin (motors-car-dealership-classified-listings) by StylemixThemes contains a Blind SQL Injection vulnerability. The issue affects Motors from n/a through 1.4.126.

The Broadcast Live Video plugin by VideoWhisper.com contains a Missing Authorization vulnerability that allows Exploiting Incorrectly Configured Access Control Security Levels. The issue affects versions from n/a through 7.3.9.

The myCred plugin contains an authentication bypass by spoofing vulnerability that allows identity spoofing. The issue affects versions from n/a through 4.0.1.

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard — the fix only accepts certificates that comply with this standard. The issue affects Apache Qpid Proton C through 0.40.0.

The TableOn plugin (posts-table-filterable) by PluginUs.Net contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions from n/a through 1.0.7.

The LearnPress plugin by ThimPress contains a Missing Authorization vulnerability that allows Exploiting Incorrectly Configured Access Control Security Levels. The issue affects versions from n/a through 4.4.11.

The OceanWP plugin for WordPress contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions from n/a through 4.2.7.

When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass, though no user name will be set, so the effects depend on how the application handles this condition — meaning authentication has not completed yet. The issue affects Apache Qpid Proton C through 0.40.0.

The GEO my WordPress plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 4.5.5.5.

The HANDMADE – Dropshipping for Etsy and WooCommerce plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 1.0.10.

A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. The issue affects Apache Qpid Proton C through 0.40.0.

A vulnerability in Apache Qpid Proton C (through 0.40.0) affects the OpenSSL TLS implementation. The pn_ssl_domain_set_trusted_ca_db() and pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors, potentially causing unexpected peer certificates to be trusted.

The Everest Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2. This makes it possible for unauthenticated attackers to extract arbitrary WordPress post meta values — including license keys, API tokens, SMTP credentials, and Stripe or AWS secrets stored on any post type — via form submission notification emails or stored entries. The submission nonce is publicly rendered in every embedded form and can additionally be minted anonymously via the nopriv everest_forms_get_form_update_nonce action, meaning no account or prior authentication of any kind is required to complete the exploit.

The Everest Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'evf_toast_type' parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Exploitation requires the sibling evf_toast parameter to decode successfully via atob(), but this is a trivially attacker-controlled prerequisite.

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.