Tag: 0day

[webapps] WordPress Plugin Popup Maker 1.16.5 – Stored Cross-Site Scripting (Authenticated)

[remote] Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Scripting (XSS)

[remote] Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Request Forgery (CSRF)

[webapps] PKP Open Journals System 3.3 – Cross-Site Scripting (XSS)

[remote] Delta Controls enteliTOUCH 3.40.3935 – Cookie User Password Disclosure

[webapps] WordPress Plugin Elementor 3.6.2 – Remote Code Execution (RCE) (Authenticated)

[local] 7-zip – Code Execution / Local Privilege Escalation

[webapps] Fuel CMS 1.5.0 – Cross-Site Request Forgery (CSRF)

[webapps] WordPress Plugin Videos sync PDF 1.7.4 – Stored Cross Site Scripting (XSS)

[remote] ManageEngine ADSelfService Plus 6.1 – User Enumeration