Security notes, platform updates, and practical defensive guidance.
The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of...
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user...
The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two...
The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any...
The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget...
The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL,...
Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the...
A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controlle...
A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A tenan...
A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive...