Gen Sato

A path traversal issue exists, allowing a remote authenticated attacker with `switch themes` privilege to obtain arbitrary files on the server if exploited.

The issue allows a remote authenticated attacker with administrative privileges to execute an arbitrary OS command.

A cross-site request forgery issue allows a remote unauthenticated attacker to delete data in the system.

A directory traversal issue allows a remote authenticated attacker with administrative privileges to delete directories and files in the system.

A directory traversal issue allows a remote authenticated attacker with administrative privileges to obtain files in the system.

A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script by having a user visit a malicious URL, potentially affecting WordPress installations with the Amelia plugin.

The issue is a cross-site scripting vulnerability that allows a remote unauthenticated attacker to inject an arbitrary script. This can be exploited to conduct cross-site scripting attacks. The vulnerability exists due to inadequate protection of the web page structure.

A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script.

Name of the Vulnerable Software and Affected Versions: Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions prior to 1.5.11, update to version 1.5.11 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Quiz And Survey Master versions prior to 7.1.14 Description: A cross-site scripting issue allows a remote attacker to inject arbitrary script via unspecified vectors. Recommendations: For versions prior to 7.1.14, update to version 7.1.14 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache versions prior to 0.9.1.7 Description: A directory traversal issue allows a remote attacker with administrator privileges to delete arbitrary files on the server. Recommendations: For WP Fastest Cache versions prior to 0.9.1.7, update to version 0.9.1.7 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro versions prior to 2.5.6 Description: The issue allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. This can be exploited by attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Recommendations: For versions prior to 2.5.6, update to version 2.5.6 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation.

The issue allows remote attackers to execute arbitrary SQL commands via a specially crafted URL. This can be achieved by exploiting a SQL injection vulnerability.

A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The issue allows an attacker with administrative rights to execute arbitrary PHP code on the server. This can be achieved via unspecified vectors, indicating a potential input validation problem.

A cross-site scripting issue exists, allowing an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML.

The issue allows remote authenticated attackers to read arbitrary files due to a directory traversal vulnerability in the shortcodes function.

The issue allows remote authenticated users to upload arbitrary image files.