All Posts by: Virtual Patching

Welcart e-Commerce up to 2.2.3 cross site scripting [CVE-2021-20734]

A vulnerability, which was classified as problematic, was found in Welcart e-Commerce up to 2.2.3 (E-Commerce Management Software). Affected is

Common Vulnerabilities and Exposures

Akaunting up to 2.0.9 Export Item name csv injection

A vulnerability has been found in Akaunting up to 2.0.9 and classified as critical. Affected by this vulnerability is an

Common Vulnerabilities and Exposures

IS-SVG up to 4.3.1 SVG String incorrect regex

A vulnerability was found in IS-SVG up to 4.3.1 and classified as problematic. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

Qix Color-String up to 1.5.5 HWB String incorrect regex

A vulnerability was found in Qix Color-String up to 1.5.5. It has been classified as problematic. This affects an unknown

Common Vulnerabilities and Exposures

Location Manager Plugin up to 2.1.0.9 on WordPress AJAX Action gd_popular_location_list sql injection

A vulnerability, which was classified as critical, has been found in Location Manager Plugin up to 2.1.0.9 on WordPress (WordPress

Common Vulnerabilities and Exposures

Admin Columns Free Plugin/Admin Columns Pro Plugin cross site scripting

A vulnerability, which was classified as problematic, was found in Admin Columns Free Plugin and Admin Columns Pro Plugin on

Common Vulnerabilities and Exposures

JetPack Plugin up to 9.7 on WordPress Jetpack Carousel information disclosure

A vulnerability has been found in JetPack Plugin up to 9.7 on WordPress (WordPress Plugin) and classified as problematic. Affected

Common Vulnerabilities and Exposures

Autoptimize Plugin up to 2.7.7 on WordPress Import cross site scripting

A vulnerability was found in Autoptimize Plugin up to 2.7.7 on WordPress (WordPress Plugin) and classified as problematic. Affected by

Common Vulnerabilities and Exposures

Jannah Theme up to 5.4.3 on WordPress AJAX Action tie_get_user_weather options cross site scripting

A vulnerability was found in Jannah Theme up to 5.4.3 on WordPress (WordPress Plugin). It has been classified as problematic.

Common Vulnerabilities and Exposures

GetPaid Plugin up to 2.3.3 on WordPress Payment Form access control

A vulnerability was found in GetPaid Plugin up to 2.3.3 on WordPress (WordPress Plugin). It has been declared as critical.

Common Vulnerabilities and Exposures

Fix Your WordPress Security Plugin up to 1.2.1 on WordPress $_SERVER['REQUEST_URI'] cross site scripting

A vulnerability was found in Fix Your WordPress Security Plugin up to 1.2.1 on WordPress (Content Management System). It has

Common Vulnerabilities and Exposures

Fix Your WordPress Security Plugin up to 1.2.1 on WordPress GET Parameter historyvalue cross site scripting

A vulnerability classified as problematic has been found in Fix Your WordPress Security Plugin up to 1.2.1 on WordPress (Content

Common Vulnerabilities and Exposures

Custom Content Types and Fields Plugin up to 2.7.26 on WordPress Singular Label cross site scripting

A vulnerability classified as problematic was found in Custom Content Types and Fields Plugin up to 2.7.26 on WordPress (WordPress

Common Vulnerabilities and Exposures

Custom Content Types and Fields Plugin up to 2.7.26 on WordPress Menu Label cross site scripting

A vulnerability, which was classified as problematic, has been found in Custom Content Types and Fields Plugin up to 2.7.26

Common Vulnerabilities and Exposures

WP Config File Editor Plugin up to 1.7.1 on WordPress cross site scripting

A vulnerability, which was classified as problematic, was found in WP Config File Editor Plugin up to 1.7.1 on WordPress

Common Vulnerabilities and Exposures

F-Secure Linux Security FSAVD null pointer dereference [CVE-2021-33572]

A vulnerability has been found in F-Secure Linux Security (the affected version is unknown) and classified as problematic. This vulnerability

Common Vulnerabilities and Exposures

Neos Forms GET Request input validation [CVE-2021-32697]

A vulnerability was found in Neos Forms (unknown version) and classified as critical. This issue affects some unknown functionality of

Common Vulnerabilities and Exposures

Google Android 11.0 Bluetooth avrc_pars_ct.cc avrc_pars_browse_rsp out-of-bounds read

A vulnerability was found in Google Android 11.0 (Smartphone Operating System). It has been classified as problematic. Affected is the

Common Vulnerabilities and Exposures

Google Android 8.1/9.0/10.0/11.0 Bluetooth btif_rc.cc handle_rc_metamsg_cmd out-of-bounds write

A vulnerability was found in Google Android 8.1/9.0/10.0/11.0 (Smartphone Operating System). It has been declared as critical. Affected by this

Common Vulnerabilities and Exposures

Google Android 8.1/9.0/10.0/11.0 p2p_pd.c p2p_process_prov_disc_req out-of-bounds read

A vulnerability was found in Google Android 8.1/9.0/10.0/11.0 (Smartphone Operating System). It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures

Autoptimize Plugin up to 2.7.7 on WordPress Import code injection

A vulnerability has been found in Autoptimize Plugin up to 2.7.7 on WordPress (WordPress Plugin) and classified as critical. This

Common Vulnerabilities and Exposures

Textpattern 4.7.3 include/txp_file.php file_insert unrestricted upload

A vulnerability was found in Textpattern 4.7.3 and classified as critical. This issue affects the function file_insert of the file

Common Vulnerabilities and Exposures

Typesetter 5.1 index.php/Admin/Classes cross site scripting

A vulnerability was found in Typesetter 5.1. It has been classified as problematic. Affected is some unknown processing of the

Common Vulnerabilities and Exposures

Fancy Product Designer Plugin up to 4.6.8 on WordPress unrestricted upload

A vulnerability was found in Fancy Product Designer Plugin up to 4.6.8 on WordPress (WordPress Plugin). It has been declared