Latest CVE and advisory summaries, rewritten for quick scanning with credit to the original sources.
Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO
Unauthenticated SQL Injection in GEO my WordPress
Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system comp...
Unauthenticated Broken Access Control in Envira Photo Gallery
Unauthenticated Cross Site Scripting (XSS) in Pods
Unauthenticated Sensitive Data Exposure in GetGenie
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5.5.1. The plugin chains three independent...
The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8. This is due to missing authorization checks on the wpfb_hide_review and wprp_save_review_admi...
Attackers can exploit multiple high-severity vulnerabilities in GitLab to achieve account takeover, cause denial of service, add unauthorised email addresses and execute arbitrary client-side code. Patch immediately.
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier