Categoria: CVE

A vulnerability classified as critical has been found in wupsales AI Copilot Plugin up to 1.5.6 on WordPress. Affected is the function wp_create_user of the component Shortcode. The manipulation of the argument waic-nonce leads...

A vulnerability described as problematic has been identified in Link Library Plugin up to 7.9.3 on WordPress. This impacts an unknown function. Executing a manipulation can lead to cross site scripting. The identification of...

A vulnerability marked as problematic has been reported in AI Engine Plugin up to 3.6.5 on WordPress. This affects an unknown function. Performing a manipulation results in path traversal. This vulnerability was named...

A vulnerability labeled as problematic has been found in AI Engine Plugin up to 3.6.3 on WordPress. The impacted element is an unknown function. Such manipulation leads to authorization bypass. This vulnerability is uniquely...

A vulnerability identified as critical has been detected in Solace Extra Plugin up to 1.6.0 on WordPress. The affected element is an unknown function. This manipulation causes improper access controls. This vulnerability is...

A vulnerability categorized as problematic has been discovered in Download Monitor Plugin up to 5.2.5 on WordPress. Impacted is an unknown function of the component Download Logging. The manipulation results in missing...

A vulnerability identified as problematic has been detected in ShapedPlugin Easy Accordion Plugin up to 3.1.8 on WordPress. This vulnerability affects the function accordion_header_renderer of the component Accordion Header...

A vulnerability categorized as critical has been discovered in Legion of the Bouncy Castle BC-FJA up to 1.0.2.6/2.0.1/2.1.2. This affects the function finalize of the component Finalizer. Executing a manipulation can lead to...

A vulnerability was found in Legion of the Bouncy Castle Bouncy Castle for Java FIPS up to 2.1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Native Entropy Source....

A vulnerability was found in klever-io klever-go up to 1.7.17. It has been declared as problematic. Affected by this vulnerability is the function Gin Engine.Run of the component REST API. Such manipulation leads to denial of...

A vulnerability was found in Ghostfolio up to 3.3.x. It has been classified as problematic. Affected is an unknown function of the file /api/v1/subscription/stripe/callback of the component Stripe Checkout Success URL Handler....

A vulnerability was found in Shopify ruby-lsp up to 0.10.3 and classified as critical. This impacts an unknown function of the file .vscode/settings.json of the component VS Code Extension. The manipulation results in os command...