https://portal.patchman.co/detections/rss/vulnerabilities/This feed contains the vulnerability definitions added by Patchmanen-USTue, 19 May 2026 11:43:00 GMTrfeed v1.1.1https://github.com/svpino/rfeed/blob/master/README.md<p>Prevent a user with an Author role, using a specially crafted request, from being able to create a post "written by" another user.<br><br>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4340</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress214<p>wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.<br><br>http://www.cvedetails.com/cve/CVE-2012-2402/<br><br>http://core.trac.wordpress.org/changeset/20526/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress21<p>Drupal core's multisite feature dynamically determines which configuration file to use based on the HTTP Host header. The HTTP Host header validation did not sufficiently check maliciously-crafted header values, thereby exposing a denial of service vulnerability. This vulnerability also affected sites that didn't actually use the multisite feature. <br> <br>Part of security release SA-CORE-2014-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal804<p>Only allow operations on network plugins through the network admin.<br><br>http://core.trac.wordpress.org/ticket/21187</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress11<p>The mailto component had not verified validity of the URL prior to sending.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla669<p>A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user (lowest id). Typically, this is an administrator user. Note, that changing the first users username may lessen the impact of this exploit (since the person who changed the password does not know the login associated with the new password). However, the only way to completely rectify the issue is to upgrade to 1.5.6 (or patch the /components/com_user/models/reset.php file). <br> <br>Part of security release: 1.5.6</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla666<p>When outputting user-supplied data Drupal strips potentially dangerous HTML attributes and tags or escapes characters which have a special meaning in HTML. This output filtering secures the site against cross site scripting attacks via user input.<br><br>Certain byte sequences that are valid in the UTF-8 specification are potentially dangerous when interpreted as UTF-7. Internet Explorer 6 and 7 may decode these characters as UTF-7 if they appear before the <meta http-equiv="Content-Type" /> tag that specifies the page content as UTF-8, despite the fact that Drupal also sends a real HTTP header specifying the content as UTF-8. This behaviour enables malicious users to insert and execute Javascript in the context of the website if site visitors are allowed to post content.<br><br>https://drupal.org/node/449078</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal106<p>Weak random number generation during password reset leads to possibility of changing a user's password.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla679<p>Drupal core's multisite feature dynamically determines which configuration file to use based on the HTTP Host header. The HTTP Host header validation does not sufficiently check maliciously-crafted header values. An attacker could cause Drupal to include and execute specifically named files outside of its root directory. <br> <br>Part of security release SA-CORE-2014-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.8</li> <li>Drupal 5.9</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal805<p>The XML processing of XML-RPC requests is vulnerable to an XML entity expansion attack and other related XML payload attacks which can cause CPU and memory exhaustion and the site's database to reach the maximum number of open connections. Any of these may lead to the site becoming unavailable or unresponsive (denial of service).</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1054<p>Method of encoding search terms had led to possible information disclosure. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla152<p>A crafted request had caused disclosure of the directory structure on the server (including any directory that php has access to).</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla671<p>Drupal includes an OpenID module which is publicly available. The PHP XML parser used by this endpoint was vulnerable to an XML entity expansion attack and other related XML payload attacks which could cause CPU and memory exhaustion and the site's database to reach the maximum number of open connections. Any of these may lead to the site becoming unavailable or unresponsive (denial of service). This vulnerability only affected sites that have the OpenID module enabled. <br> <br>Part of security release SA-CORE-2014-004 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal1052<p>Drupal includes an XML-RPC endpoint which is publicly available (xmlrpc.php). The PHP XML parser used by this XML-RPC endpoint was vulnerable to an XML entity expansion attack and other related XML payload attacks which could cause CPU and memory exhaustion and the site's database to reach the maximum number of open connections. Any of these may lead to the site becoming unavailable or unresponsive (denial of service). <br> <br>All Drupal sites were vulnerable to this attack whether XML-RPC is used or not. <br> <br>Part of security release SA-CORE-2014-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.8</li> <li>Drupal 5.9</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal1053<p>Information disclosure was possible via XML entity attacks in the external GetID3 library.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1056<p>wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.<br><br>http://www.cvedetails.com/cve/CVE-2011-4957/<br><br>http://core.trac.wordpress.org/changeset/20493/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress19<p>Checking of bad protocols was not normalized.<br><br>http://core.trac.wordpress.org/changeset/17172/branches/3.0/wp-includes/formatting.php</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress9<p>Fixes a possible but unlikely code execution when processing widgets.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1057<p>The OpenID module didn't implement all the required verifications from the OpenID 2.0 protocol and was vulnerable to a number of attacks. <br> <br>Specifically: <br>- OpenID should verify that a "openid.response_nonce" had not already been used for an assertion by the OpenID provider <br>- OpenID should verify the value of openid.return_to as obtained from the OpenID provider <br>- OpenID must verify that all fields that were required to be signed were signed <br> <br>These specification violations allowed malicious sites to harvest positive assertions from OpenID providers and used them on sites using the OpenID module to obtain access to preexisting accounts bound to the harvested OpenIDs. Intercepted assertions from OpenID providers could also be replayed and used to obtain access to user accounts bound to the intercepted OpenIDs. <br> <br>Part of security release SA-CORE-2010-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal119<p>A cross-site scripting vulnerability was found due to Drupal's form API failing to sanitize option group labels in select elements.<br><br>https://www.drupal.org/SA-CORE-2014-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.8</li> <li>Drupal 5.9</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal806<p>The File module included in Drupal 7 core allowed attaching files to pieces of content. The module didn't sufficiently check permission to view the attached file when attaching a file that was previously uploaded. This could allow attackers to gain access to private files. <br> <br>Part of security release SA-CORE-2014-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal802<p>Tiny browser included with TinyMCE 3.0 editor allowed files to be uploaded and removed without logging in. <br> <br>Part of security release: 1.5.12</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla673<p>During construction of JURI objects the supplied URI isn't sanitized properly, leading to a vulnerability for injection through crafted URLs.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla677<p>A series of CSRF faults had existed in the administrator application for com_media.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla672<p>Joomla 1.5.18 and older had contained various SQL injection vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla676<p>The plugin did not sufficiently check whether a page was actually visited by the website administratory. This vulnerability gives a potential intruder the power to do anything he wants on his victim’s website and allows for any PHP file to be uploaded. <br><br>http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>MailPoet 2.1</li> <li>MailPoet 2.1.1</li> <li>MailPoet 2.1.2</li> <li>MailPoet 2.1.3</li> <li>MailPoet 2.1.4</li> <li>MailPoet 2.1.5</li> <li>MailPoet 2.1.6</li> <li>MailPoet 2.1.7</li> <li>MailPoet 2.1.8</li> <li>MailPoet 2.1.9</li> <li>MailPoet 2.2</li> <li>MailPoet 2.2.1</li> <li>MailPoet 2.2.2</li> <li>MailPoet 2.2.3</li> <li>MailPoet 2.3</li> <li>MailPoet 2.3.1</li> <li>MailPoet 2.3.2</li> <li>MailPoet 2.3.3</li> <li>MailPoet 2.3.4</li> <li>MailPoet 2.3.5</li> <li>MailPoet 2.4</li> <li>MailPoet 2.4.1</li> <li>MailPoet 2.4.2</li> <li>MailPoet 2.4.3</li> <li>MailPoet 2.4.4</li> <li>MailPoet 2.5</li> <li>MailPoet 2.5.1</li> <li>MailPoet 2.5.2</li> <li>MailPoet 2.5.3</li> <li>MailPoet 2.5.4</li> <li>MailPoet 2.5.5</li> <li>MailPoet 2.5.7</li> <li>MailPoet 2.5.8</li> <li>MailPoet 2.5.9</li> <li>MailPoet 2.5.9.1</li> <li>MailPoet 2.5.9.2</li> <li>MailPoet 2.5.9.3</li> <li>MailPoet 2.5.9.4</li> <li>MailPoet 2.6</li> <li>MailPoet 2.6.1</li> <li>MailPoet 2.6.2</li> <li>MailPoet 2.6.3</li> <li>MailPoet 2.6.4</li> <li>MailPoet 2.6.5</li> <li>MailPoet 2.6.6</li> <li>MailPoet 2.6.7</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTMailPoet1049<p>Timthumb upload vulnerability</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Timthumb 2</li> <li>Timthumb 3</li> <li>Timthumb 4</li> <li>Timthumb 5</li> <li>Timthumb 6</li> <li>Timthumb 7</li> <li>Timthumb 8</li> <li>Timthumb 9</li> <li>Timthumb 10</li> <li>Timthumb 11</li> <li>Timthumb 12</li> <li>Timthumb 13</li> <li>Timthumb 14</li> <li>Timthumb 15</li> <li>Timthumb 16</li> <li>Timthumb 17</li> <li>Timthumb 18</li> <li>Timthumb 19</li> <li>Timthumb 20</li> <li>Timthumb 21</li> <li>Timthumb 22</li> <li>Timthumb 23</li> <li>Timthumb 24</li> <li>Timthumb 25</li> <li>Timthumb 26</li> <li>Timthumb 27</li> <li>Timthumb 28</li> <li>Timthumb 29</li> <li>Timthumb 30</li> <li>Timthumb 31</li> <li>Timthumb 32</li> <li>Timthumb 33</li> <li>Timthumb 34</li> <li>Timthumb 35</li> <li>Timthumb 36</li> <li>Timthumb 37</li> <li>Timthumb 38</li> <li>Timthumb 39</li> <li>Timthumb 40</li> <li>Timthumb 41</li> <li>Timthumb 42</li> <li>Timthumb 43</li> <li>Timthumb 44</li> <li>Timthumb 45</li> <li>Timthumb 46</li> <li>Timthumb 47</li> <li>Timthumb 48</li> <li>Timthumb 49</li> <li>Timthumb 50</li> <li>Timthumb 51</li> <li>Timthumb 52</li> <li>Timthumb 53</li> <li>Timthumb 54</li> <li>Timthumb 55</li> <li>Timthumb 56</li> <li>Timthumb 57</li> <li>Timthumb 58</li> <li>Timthumb 59</li> <li>Timthumb 60</li> <li>Timthumb 61</li> <li>Timthumb 62</li> <li>Timthumb 63</li> <li>Timthumb 64</li> <li>Timthumb 65</li> <li>Timthumb 66</li> <li>Timthumb 67</li> <li>Timthumb 68</li> <li>Timthumb 69</li> <li>Timthumb 70</li> <li>Timthumb 71</li> <li>Timthumb 72</li> <li>Timthumb 73</li> <li>Timthumb 74</li> <li>Timthumb 75</li> <li>Timthumb 76</li> <li>Timthumb 77</li> <li>Timthumb 78</li> <li>Timthumb 79</li> <li>Timthumb 80</li> <li>Timthumb 81</li> <li>Timthumb 82</li> <li>Timthumb 83</li> <li>Timthumb 84</li> <li>Timthumb 85</li> <li>Timthumb 86</li> <li>Timthumb 87</li> <li>Timthumb 88</li> <li>Timthumb 89</li> <li>Timthumb 90</li> <li>Timthumb 91</li> <li>Timthumb 92</li> <li>Timthumb 93</li> <li>Timthumb 94</li> <li>Timthumb 95</li> <li>Timthumb 96</li> <li>Timthumb 97</li> <li>Timthumb 98</li> <li>Timthumb 99</li> <li>Timthumb 100</li> <li>Timthumb 101</li> <li>Timthumb 102</li> <li>Timthumb 103</li> <li>Timthumb 104</li> <li>Timthumb 105</li> <li>Timthumb 106</li> <li>Timthumb 107</li> <li>Timthumb 108</li> <li>Timthumb 109</li> <li>Timthumb 110</li> <li>Timthumb 111</li> <li>Timthumb 112</li> <li>Timthumb 113</li> <li>Timthumb 114</li> <li>Timthumb 115</li> <li>Timthumb 116</li> <li>Timthumb 117</li> <li>Timthumb 118</li> <li>Timthumb 119</li> <li>Timthumb 120</li> <li>Timthumb 121</li> <li>Timthumb 122</li> <li>Timthumb 123</li> <li>Timthumb 124</li> <li>Timthumb 125</li> <li>Timthumb 126</li> <li>Timthumb 127</li> <li>Timthumb 128</li> <li>Timthumb 129</li> <li>Timthumb 130</li> <li>Timthumb 131</li> <li>Timthumb 132</li> <li>Timthumb 133</li> <li>Timthumb 134</li> <li>Timthumb 135</li> <li>Timthumb 136</li> <li>Timthumb 137</li> <li>Timthumb 138</li> <li>Timthumb 139</li> <li>Timthumb 140</li> <li>Timthumb 141</li> <li>Timthumb 142</li> <li>Timthumb 143</li> <li>Timthumb 144</li> <li>Timthumb 145</li> <li>Timthumb 146</li> <li>Timthumb 147</li> <li>Timthumb 148</li> <li>Timthumb 149</li> <li>Timthumb 150</li> <li>Timthumb 151</li> <li>Timthumb 152</li> <li>Timthumb 153</li> <li>Timthumb 154</li> <li>Timthumb 155</li> <li>Timthumb 156</li> <li>Timthumb 157</li> <li>Timthumb 158</li> <li>Timthumb 159</li> <li>Timthumb 160</li> <li>Timthumb 161</li> <li>Timthumb 162</li> <li>Timthumb 163</li> <li>Timthumb 164</li> <li>Timthumb 165</li> <li>Timthumb 166</li> <li>Timthumb 167</li> <li>Timthumb 168</li> <li>Timthumb 169</li> <li>Timthumb 170</li> <li>Timthumb 171</li> <li>Timthumb 172</li> <li>Timthumb 173</li> <li>Timthumb 174</li> <li>Timthumb 175</li> <li>Timthumb 176</li> <li>Timthumb 177</li> <li>Timthumb 178</li> <li>Timthumb 179</li> <li>Timthumb 180</li> <li>Timthumb 181</li> <li>Timthumb 182</li> <li>Timthumb 183</li> <li>Timthumb 184</li> <li>Timthumb 185</li> <li>Timthumb 186</li> <li>Timthumb 187</li> <li>Timthumb 188</li> <li>Timthumb 189</li> <li>Timthumb 190</li> <li>Timthumb 191</li> <li>Timthumb 192</li> <li>Timthumb 193</li> <li>Timthumb 194</li> <li>Timthumb 195</li> <li>Timthumb 196</li> <li>Timthumb 197</li> <li>Timthumb 198</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTTimthumb27<p>Updated security restrictions around file uploads to mitigate the potential for cross-site scripting. The extensions .swf and .exe are no longer allowed by default, and .htm and .html are only allowed if the user has the ability to use unfiltered HTML.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress213<p>When running a site under SSL ONLY (the entire site was forced to be under ssl), Joomla! had not set the SSL flag on the cookie. This had allowed someone monitoring the network to find the cookie related to the session.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla670<p>wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter. <br><br>http://www.cvedetails.com/cve/CVE-2011-0701/<br><br>http://core.trac.wordpress.org/changeset/17393</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress43<p>Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted strings. This vulnerability is mitigated by the fact that users must have the ability to post content sent to the filter system such as a role with the "post comments" or "Forum topic: Create new content" permission. <br> <br>Part of security release SA-CORE-2012-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal68<p>https://github.com/osCommerce/oscommerce2/commit/65219120b1f174aa69b5045bfe43ff5dc22d8e63</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>osCommerce 2.2ms2</li> <li>osCommerce 2.2ms2-051113</li> <li>osCommerce 2.2ms2-060817</li> <li>osCommerce 2.2rc1</li> <li>osCommerce 2.2rc2</li> <li>osCommerce 2.2rc2a</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTosCommerce34<p>SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field. <br><br>http://www.cvedetails.com/cve/CVE-2010-4257/<br><br>http://core.trac.wordpress.org/changeset/16625<br>http://core.trac.wordpress.org/changeset/16638</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress53<p>An XSRF vulnerability could force an aggregator feed to update. Since some services were rate-limited (e.g. Twitter limits requests to 150 per hour) this could lead to a denial of service. <br> <br>Part of security release SA-CORE-2012-001 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal66<p>When using private files in combination with a node access module, the File module allows unrestricted access to private files. <br> <br>Part of security release SA-CORE-2011-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal61<p>Weak encryption had caused potential information disclosure.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla678<p>WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.<br><br>http://www.cvedetails.com/cve/CVE-2013-2202/<br><br>http://core.trac.wordpress.org/changeset/24471/branches/3.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress30<p>The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role. <br><br>http://www.cvedetails.com/cve/CVE-2010-5106/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress57<p>User signatures have no separate input format, they use the format of the comment with which they are displayed. A user will no longer be able to edit a comment when an administrator changes the comment's input format to a format that is not accessible to the user. However they will still be able to modify their signature, which will then be processed by the new input format. <br> <br>If the new format is very permissive, via their signature, the user may be able to insert arbitrary HTML and script code into pages or, when the PHP filter is enabled for the new format, execute PHP code. <br> <br>Part of security release SA-CORE-2009-007</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal130<p>Drupal core provides the ability to have private files, including images. A vulnerability was identified in which derivative images (which Drupal automatically creates from these images based on "image styles" and which may differ, for example, in size or saturation) did not always receive the same protection. Under some circumstances, this would allow users to access image derivatives for images they should not be able to view. <br> <br>Part of security release SA-CORE-2013-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal78<p>When an anonymous user fails to login due to mistyping his username or password, and the page he is on contains a sortable table, the (incorrect) username and password were included in links on the table. If the user visits these links the password may then be leaked to external sites via the HTTP referer. <br> <br>In addition, if the anonymous user is enticed to visit the site via a specially crafted URL while the Drupal page cache is enabled, a malicious user could be able to retrieve the (incorrect) username and password from the page cache. <br> <br>Part of security release SA-CORE-2009-007 <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal132<p>A flaw in JRequest exists where variables set with JRequest::setVar are not cleaned when fetching the variable at a later point in the request. This can result in variable injection (unwanted characters injected into returned data). <br> <br>Part of security release: 1.5.7</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla667<p>With the right parameters make_clickable produces segmentation faults.<br><br>http://core.trac.wordpress.org/ticket/16892</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress6<p>Session id doesn't get modified when user logs in. A remote site may be able to forward a visitor to the Joomla! site and set a specific cookie. If the user then logs in, the remote site can use that cookie to authenticate as that user.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla675<p>Drupal did not properly isolate the cached data of different anonymous users, which allowed remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors. <br> <br>http://www.cvedetails.com/cve/CVE-2014-2983/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal737<p>Inadequate permission checking allows unauthorised viewing of administrative back end information.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla680<p>A more generic message for wp_upload_dir()<br><br>http://core.trac.wordpress.org/ticket/21796</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress13<p>In com_mailto, it had been possible to bypass timeout protection against sending automated emails.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla674<p>This vulnerability exists on Windows, regardless of the type of webserver (Apache, IIS) used. <br> <br>The Drupal theme system takes URL arguments into account when selecting a template file to use for page rendering. While doing so, it didn't take into account how Windows arrives at a canonicalized path. This enabled malicious users to include files, readable by the webserver and located on the same volume as Drupal, and to execute PHP contained within those files. For example: If a site has uploads enabled, an attacker may upload a file containing PHP code and cause it to be included on a subsequent request by manipulating the URL used to access the site. <br> <br>Part of security release SA-CORE-2009-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal104<p>Harden check_admin_referer() when called without arguments, which plugins should avoid.<br><br>http://core.trac.wordpress.org/changeset/17387</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress47<p>Security hardening to media uploads <br><br>http://core.trac.wordpress.org/changeset/17569</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress7<p>SQL injection in get_terms.<br><br>http://www.cvedetails.com/cve/CVE-2011-3130/<br><br>http://core.trac.wordpress.org/changeset/21759</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress4<p>XSS fixes in request_filesystem_credentials() and when deleting a plugin.<br><br>http://core.trac.wordpress.org/changeset/16373<br>http://core.trac.wordpress.org/changeset/16367</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress55<p>A malicious attacker could trick an authenticated administrative user into visiting a page containing specific JavaScript that could lead to a reflected cross-site scripting attack via JavaScript execution in CSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal329<p>Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role. <br><br>http://www.cvedetails.com/cve/CVE-2011-0700/<br>http://core.trac.wordpress.org/changeset/17406<br>http://core.trac.wordpress.org/changeset/17397<br>http://core.trac.wordpress.org/changeset/17412</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress40<p>Inadequate filtering leads to XSS vulnerability. <br> <br>Part of security release: 1.7.4 and 2.5.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla136<p>The menu system routes page requests to appropriate handlers. It also determines whether a user had access to pages based on several criteria, such as permissions assigned to a role. Drupal 6 features an entirely revised menu system, including changes to the way access was dealt with, which if not properly understood by developers could lead to vulnerabilities. This security release provides a more secure access behaviour by default, and fixes incorrectly set menu items in Drupal core. <br> <br>Access to some pages was not appropriately controlled: <br> - Any user could edit profile pages of other users. <br> - Users who could view administration pages were able to edit content types. <br> - The tracker and blog pages expose information to users without the "access content" permission. <br> <br>Part of security release SA-2008-026 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal81<p>A reflected cross site scripting vulnerability was discovered in Drupal's error handler. Drupal displays PHP errors in the messages area, and a specially crafted URL can cause malicious scripts to be injected into the message. The issue can be mitigated by disabling on-screen error display at admin/settings/error-reporting. This is the recommended setting for production sites.<br><br>https://drupal.org/node/1168756</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal121<p>Multiple XSS vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form. <br><br>http://www.cvedetails.com/cve/CVE-2010-4536/<br>http://core.trac.wordpress.org/changeset/17172<br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress48<p>Fix insufficient input validation that could result in redirecting or leading a user to another website.<br><br>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4339</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress221<p>Restrict some post IDs when dealing with media uploading, which could leak some info (or attach media to a post the user doesn’t have privileges to).<br><br>http://core.trac.wordpress.org/changeset/21087/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress15<p>Unfiltered HTML comments from a frame.<br><br>http://core.trac.wordpress.org/ticket/20812</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress16<p>Block unsafe PHP de-serialization that could occur in limited situations and setups, which can lead to remote code execution. <br><br>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4338</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress246<p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of media files, (2) editing of media files, (3) installation of plugins, (4) updates to plugins, (5) installation of themes, or (6) updates to themes.<br><br>http://www.cvedetails.com/cve/CVE-2013-2201/<br><br>http://core.trac.wordpress.org/changeset/24475/branches/3.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress31<p>Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.<br><br>http://www.cvedetails.com/cve/CVE-2011-4956/<br><br>http://core.trac.wordpress.org/changeset/17583<br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress50<p>a vulnerability that allows Contributor-level users to improperly publish posts.<br><br>http://core.trac.wordpress.org/changeset/17710</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress32<p>wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. <br><br>http://www.cvedetails.com/cve/CVE-2012-2404/<br><br>http://core.trac.wordpress.org/changeset/20486/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress20<p>osCommerce 2.2 File Manager upload vulnerability</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>osCommerce 2.2ms2</li> <li>osCommerce 2.2ms2-051113</li> <li>osCommerce 2.2ms2-060817</li> <li>osCommerce 2.2rc1</li> <li>osCommerce 2.2rc2</li> <li>osCommerce 2.2rc2a</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTosCommerce41<p>wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.<br><br>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2173</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress49<p>In excerpt view, show the excerpt only if the user can read_post.<br><br>http://core.trac.wordpress.org/changeset/21086/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress14<p>Force HTML filtering on comment text in the admin.<br><br>http://core.trac.wordpress.org/changeset/17400</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress44<p>When using re-colorable themes, color inputs are not sanitized. Malicious color values can be used to insert arbitrary CSS and script code. Successful exploitation requires the "Administer themes" permission.<br><br>https://drupal.org/node/1168756</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal60<p>On some servers the error log had been read by unauthorised users. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla138<p>WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.<br><br>Full Path Disclosure (FPD) during File Upload.<br><br>http://www.cvedetails.com/cve/CVE-2013-2203/<br><br>http://core.trac.wordpress.org/changeset/24464/branches/3.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress29<p>xss in get_pagenum_link()<br><br>http://core.trac.wordpress.org/ticket/14556</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress18<p>Inadequate filtering leads to XSS vulnerability. <br> <br>Part of security release: 1.7.4 and 2.5.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla137<p>The BlogAPI module did not validate the extension of uploaded files, enabled users with the "administer content with blog api" permission to upload harmful files. <br> <br>Part of security release SA-2008-047</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal89<p>Titles are not escaped prior to being displayed on content edit forms, allowing users to inject arbitrary HTML and script code into these pages.<br><br>http://www.cvedetails.com/cve/CVE-2008-1133/<br><br>https://drupal.org/node/227608</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal80<p>A group of security researchers identified a flaw in how some OpenID relying parties implement Attribute Exchange (AX). Not verifying that attributes being passed through AX have been signed could allow an attacker to modify users' information. <br> <br>Part of security release SA-CORE-2012-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal67<p>Inadequate filtering leads to XSS vulnerability in highlighter plugin. <br> <br>Part of security release: 2.5.10, 3.1.0 and 3.0.4.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla142<p>Inadequate escaping leads to XSS vulnerability. <br> <br>Part of security release: 1.6.6</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla134<p>Drupal core's file upload feature blocks the upload of many files that could be executed on the server by munging the filename. A malicious user could name a file in a manner that bypasses this munging of the filename in Drupal's input validation. <br> <br>Part of security release SA-CORE-2012-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal75<p>A parameter passed into the node access API was not properly escaped or validated before being used in SQL queries. <br> <br>Part of security release SA-CORE-2009-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal99<p>The module supports unpublishing comments by privileged users. Users with the "post comments without approval" permission however could craft a URL which allowed them to republish previously unpublished comments. <br> <br>Part of security release SA-CORE-2010-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal120<p>Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.<br><br>http://www.cvedetails.com/cve/CVE-2011-2687/<br><br>https://drupal.org/node/1204582</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal62<p>The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks by leveraging the Administrator or Editor role and composing crafted text. <br><br>http://www.cvedetails.com/cve/CVE-2012-3383/<br><br>http://core.trac.wordpress.org/changeset/21774</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress12<p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.<br><br><br>http://www.cvedetails.com/cve/CVE-2013-0236/<br><br>http://core.trac.wordpress.org/changeset/23322/branches/3.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress10<p>A CSRF vulnerability could force an aggregator feed to update. Since some services were rate-limited (e.g. Twitter limits requests to 150 per hour) this could lead to a denial of service. <br> <br>Part of security release SA-CORE-2012-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal124<p>Inadequate filtering leads to XSS vulnerability. <br> <br>Part of security release: 1.6.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla133<p>When user profile pictures were enabled, the default user profile validation function would be bypassed, possibly allowing invalid user names or e-mail addresses to be submitted. <br> <br>Part of security release SA-CORE-2009-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal103<p>When using private files in combination with certain field access modules, the File module would allow users to download the file even if they did not have access to view the field it was attached to. <br> <br>Part of security release SA-CORE-2012-001 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal64<p>WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.<br><br>http://www.cvedetails.com/cve/CVE-2011-3128/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress56<p>A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attack. The exploit can only be conducted on sites not yet installed.<br><br>https://drupal.org/node/731710</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal113<p>A deficiency in the user module allowed users who had been blocked by access rules to continue logging into the site under certain conditions. <br> <br>Part of security release SA-2008-060</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal94<p>Schema API used an inappropriate placeholder for 'numeric' fields enabling SQL injection when user-supplied data was used for such fields. This issue affects Drupal 6 only. <br> <br>Part of security release SA-2008-044</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal84<p>When an input format is deleted, not all existing content on a site is updated to reflect this deletion. Such content is then displayed unfiltered. This may lead to cross site scripting attacks when harmful tags are no longer stripped from 'malicious' content that was posted earlier.<br><br>https://drupal.org/node/345441</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal97<p>Image field descriptions are not properly sanitized before they are printed to HTML, thereby exposing a cross-site scripting vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal330<p>Drupal core's file upload feature blocks the upload of many files that could be executed on the server by munging the filename. A malicious user could name a file in a manner that bypasses this munging of the filename in Drupal's input validation. <br> <br>Part of security release SA-CORE-2012-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal127<p>The BlogAPI module did not implement correct validation for certain content fields, allowing for values to be set for fields which would otherwise be inaccessible on an internal Drupal form. <br> <br>Part of security release SA-2008-060</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal92<p>Drupal core provides the ability to list nodes on a site at admin/content. Drupal core failed to confirm a user viewing that page had access to each node in the list. This vulnerability only concerns sites running a contributed node access module and is mitigated by the fact that users must have a role with the "Access the content overview page" permission. Unpublished nodes were not displayed to users who only had the "Access the content overview page" permission. <br> <br>Part of security release SA-CORE-2012-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal71<p>Filenames containing unsafe characters such as spaces are incorrectly allowed during file upload. <br> <br>Part of security release: 3.1.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla323<p>Inadequate escaping had led to SQL injection vulnerability. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla139<p>The OpenID module was not a compliant implementation of the OpenID Authentication 2.0 specification. An implementation error allowed a user to access the account of another user when they share the same OpenID 2.0 provider. <br> <br>Part of security release SA-CORE-2009-008</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal109<p>Username validation does not adhere to provided rules, which allows users to register usernames which should be rejected. This exposes the system to potential exploits in combination with other vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla322<p>Under certain circumstances, a user with an open session that was blocked could maintain his/her session on the Drupal site, despite being blocked. <br> <br>Part of security release SA-CORE-2010-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal115<p>Drupal core's Image module allows for the on-demand generation of image derivatives. This capability could be abused by requesting a large number of new derivatives which could fill up the server disk space, and which could cause a very high CPU load. Either of these effects may lead to the site becoming unavailable or unresponsive. <br> <br>Part of security release SA-CORE-2013-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal79<p>The update system was vulnerable to cross site request forgeries. Malicious users may cause the superuser to execute old updates that may damage the database. <br> <br>Part of security release SA-2008-073</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal98<p>Access bypass in private file fields on comments. <br> <br>Drupal 7 contains two new features: the ability to attach File upload fields to any entity type in the system and the ability to point individual File upload fields to the private file directory. <br> <br>If a Drupal site was using these features on comments, and the parent node was denied access (either by a node access module or by being unpublished), the file attached to the comment could still be downloaded by non-privileged users if they know or guess its direct URL. <br> <br>Part of security release SA-CORE-2011-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal63<p>For sites using the core OpenID module, an information disclosure vulnerability was identified that allowed an attacker to read files on the local filesystem by attempting to log in to the site using a malicious OpenID server. <br> <br>Part of security release SA-CORE-2012-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal74<p>A vulnerability was identified that allowed blocked users to appear in user search results, even when the search results are viewed by unprivileged users. <br> <br>Onderdeel van security release SA-CORE-2012-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal76<p>A bug in the installer code was identified that allows an attacker to re-install Drupal using an external database server under certain transient conditions. This could allow the attacker to execute arbitrary PHP code on the original server. <br> <br>Part of security release SA-CORE-2012-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal73<p>Drupal core's forum lists failed to check user access to nodes when displaying them in the forum overview page. If an unpublished node was the most recently updated in a forum then users who should not have access to unpublished forum posts were still be able to see meta-data about the forum post such as the post title. <br> <br>Part of security release SA-CORE-2012-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal72<p>Some values from OpenID providers are output without being properly escaped, allowing malicious providers to insert arbitrary script and HTML code (XSS) into user pages. This issue affects Drupal 6.x only.<br><br>filter_xss_admin() has been hardened to prevent use of the object HTML tag in administrator input.<br><br>http://www.cvedetails.com/cve/CVE-2008-3218/<br><br>https://drupal.org/node/280571</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal85<p>The upload module looked up files for download in the database and serves them for download after access checking. However, it did not account for the fact that certain database configurations would not consider case differences in file names. If a malicious user uploaded a file which only differs in letter case, access would be granted for the earlier upload regardless of actual file access to that. <br> <br>Part of security release SA-CORE-2010-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal118<p>Translated strings (5.x, 6.x) and OpenID identities (6.x) were immediately deleted upon accessing a properly formatted URL, making such deletion vulnerable to cross site request forgeries (CSRF). This may lead to unintended deletion of translated strings or OpenID identities when a sufficiently privileged user visits a page or site created by a malicious person. <br> <br>Part of security release SA-2008-044</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal86<p>A bug in the output filter employed by Drupal makes it possible for malicious users to insert script code into pages.<br><br>https://drupal.org/node/295053</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal91<p>Weak encryption had caused potential information disclosure. <br> <br>Part of security release: 1.7.2</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla135<p>On a server configured for IP-based virtual hosts, Drupal may be caused to include and execute specifically named files outside of its root directory. <br> <br>Part of security release SA-2008-067</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal95<p>Inadequate filtering in update manager leads to XSS vulnerability. <br> <br>CVE-2012-1612 <br> <br>Part of security release: 2.5.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla149<p>A group of security researchers identified a flaw in how some OpenID relying parties implement Attribute Exchange (AX). Not verifying that attributes being passed through AX have been signed could allow an attacker to modify users' information. <br> <br>Part of security release SA-CORE-2012-001 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal125<p>A vulnerability was identified that allowed blocked users to appear in user search results, even when the search results are viewed by unprivileged users. <br> <br>Part of security release SA-CORE-2012-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal126<p>The taxonomy module allows users with the 'administer taxonomy' permission to inject arbitrary HTML and script code in the help text of any vocabulary.<br><br>https://drupal.org/node/461886</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal107<p>Drupal's form API has built-in cross-site request forgery (CSRF) validation, and also allows any module to perform its own validation on the form. In certain common cases, form validation functions may executed unsafe operations. <br> <br>Part of security release SA-CORE-2013-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal383<p>Programming error allows privilege escalation in some cases. <br> <br>Part of security release: 2.5.3 <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla2<p>The Forum module does not correctly handle certain arguments obtained from the URL. By enticing a suitably privileged user to visit a specially crafted URL, a malicious user is able to insert arbitrary HTML and script code into forum pages. Such a cross-site scripting attack may lead to the malicious user gaining administrative access.<br><br>https://drupal.org/node/507572</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal131<p>Inadequate filtering leads to XSS vulnerability in Voting plugin. <br> <br>CVE-2013-3059 <br> <br>Part of security release: 2.5.10, 3.1.0 and 3.0.4.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla143<p>The Content Translation module for Drupal 6.x enables users to make a translation of an existing item of content (a node). In that process the existing node's content was copied into the new node's submission form. <br> <br>The module contained a flaw that allowed a user with the 'translate content' permission to potentially bypass normal viewing access restrictions, for example allowing the user to see the content of unpublished nodes even if they did not have permission to view unpublished nodes. <br> <br>Part of security release SA-CORE-2009-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal100<p>When contributed modules such as Workflow NG terminate the current request during a login event, user module was not able to regenerate the user's session. This may lead to a session fixation attack, when a malicious user was able to control another users' initial session ID. As the session was not regenerated, the malicious user may use the 'fixed' session ID after the victim authenticates and would have the same access. This issue affects both Drupal 5 and Drupal 6. <br> <br>Part of security release SA-2008-044</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal87<p>A logic error in the core upload module validation allowed unprivileged users to attach files to content. This bug affects Drupal 6.x only. <br> <br>Part of security release SA-2008-060</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal93<p>Drupal forms contains a token to protect against cross site request forgeries (CSRF). The token may not been validated properly for cached forms and forms containing AHAH elements. <br> <br>Part of security release SA-2008-047</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal90<p>Inadequate filtering leads to the ability to bypass file type upload restrictions. <br> <br>Part of security release: 2.5.14 or 3.1.5.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla150<p>A vulnerability was present in the OpenID module that allowed a malicious user to log in as other users on the site, including administrators, and hijack their accounts. <br> <br>Part of security release SA-CORE-2015-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal421<p>osCommerce 2.2 Language Manager upload vulnerability</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>osCommerce 2.2ms2</li> <li>osCommerce 2.2ms2-051113</li> <li>osCommerce 2.2ms2-060817</li> <li>osCommerce 2.2rc1</li> <li>osCommerce 2.2rc2</li> <li>osCommerce 2.2rc2a</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTosCommerce45<p>The API function drupal_goto() is susceptible to a phishing attack. An attacker could formulate a redirect in a way that gets the Drupal site to send the user to an arbitrarily provided URL. No user submitted data will be sent to that URL.<br><br>https://drupal.org/node/731710</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal114<p>Drupal core directly used the mt_rand() pseudorandom number generator for generating security related strings used in several core modules. It was found that brute force tools could determine the seeds making these strings predictable under certain circumstances. <br> <br>Part of security release SA-CORE-2013-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal332<p>Inadequate permission checking had allowed unauthorised user to see permission settings in some circumstances. <br> <br>CVE Number: CVE-2013-3057 <br> <br>Part of security release: 2.5.10, 3.1.0 and 3.0.4.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla154<p>Users with "administer actions permission" can enter action descriptions and messages which are not properly filtered on output. Users with content and taxonomy tag submission permissions can create nodes and taxonomy terms which are not properly sanitized for inclusion in action messages and inject arbitrary HTML and script code into Drupal pages. Such a cross-site scripting attack may lead to the malicious user gaining administrative access.<br><br>https://drupal.org/node/880476</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal117<p>Drupal core provides the ability to have private files, including images, and Image Styles which create derivative images from an original image that may differ, for example, in size or saturation. Drupal core failed to properly terminate the page request for cached image styles allowing users to access image derivatives for images they should not be able to view. Furthermore, Drupal didn't set the right headers to prevent image styles from being cached in the browser. <br> <br>Part of security release SA-CORE-2012-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal70<p>Inadequate escaping of output leads to XSS vulnerability in language switcher module. <br> <br>CVE-2012-4532 <br> <br>Part of security release: 2.5.7</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla147<p>When using re-colorable themes, color inputs are not sanitized. Malicious color values can be used to insert arbitrary CSS and script code. Successful exploitation requires the "Administer themes" permission.<br><br>https://drupal.org/node/1168756</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.8</li> <li>Drupal 5.9</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal122<p>The Contact module does not correctly handle certain user input when displaying category information. Users privileged to create contact categories can insert arbitrary HTML and script code into the contact module administration page. Such a cross-site scripting attack may lead to the malicious user gaining administrative access.<br><br>https://drupal.org/node/661586</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal112<p>The Menu module does not correctly handle certain user input when displaying the menu administration overview. Users privileged to create new menus can insert arbitrary HTML and script code into the menu module administration page. Such a cross-site scripting attack may lead to the malicious user gaining administrative access.<br><br>https://drupal.org/node/661586</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal111<p>A vulnerability was identified that allows information about uploaded files to be displayed in RSS feeds and search results to users that do not have the "view uploaded files" permission. <br> <br>Part of security release SA-CORE-2012-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal128<p>Inadequate escaping of output leads to XSS vulnerability. <br> <br>CVE-2012-4531 <br> <br>Part of security release: 2.5.7</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla148<p>Inadequate permission checking allows unauthorised user to delete private messages. <br> <br>CVE Number: CVE-2013-3056 <br> <br>Part of security release: 2.5.10, 3.1.0 and 3.0.4.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla153<p>The function drupal_valid_token() could return TRUE for invalid tokens if the caller did not make sure that the token is a string. <br> <br>Part of security release SA-CORE-2013-003 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal334<p>Drupal core attempted to add a "defense in depth" protection to prevent script execution by placing a .htaccess file into the files directories that stopped execution of PHP scripts on the Apache web server. This protection is only necessary if there is a vulnerability on the site or on a server that allowed users to upload malicious files. The configuration in the .htaccess file did not prevent code execution on certain Apache web server configurations. <br> <br>Part of security release SA-CORE-2013-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal333<p>The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.<br><br>http://www.cvedetails.com/cve/CVE-2012-4421/<br><br>core.trac.wordpress.org/changeset/21744</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress59<p>The title of book pages is not always properly escaped, enabling users with the "create book content" permission or the permission to edit any node in the book hierarchy to insert arbitrary HTML and script code into pages. Such a Cross Site Scripting attack may lead to the attacker gaining administrator access.<br><br>https://drupal.org/node/324824</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal96<p>Inadequate filtering allows possibility of XSS exploit in some circumstances. <br> <br>CVE-2013-3058 <br> <br>Part of security release: 2.5.10, 3.1.0 and 3.0.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla145<p>Object unserialize method had led to possible denial of service vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla144<p>Drupal core's Form API allows users to set a destination, but failed to validate that the URL was internal to the site. This weakness could be abused to redirect the login to a remote site with a malicious script that harvests the login credentials and redirects to the live site. This vulnerability is mitigated only by the end user's ability to recognize a URL with malicious query parameters to avoid the social engineering required to exploit the problem.<br><br>http://www.cvedetails.com/cve/CVE-2012-1589/<br><br>https://drupal.org/node/1557938</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal69<p>Inadequate protection leads to clickjacking vulnerability. <br> <br>CVE-2012-5827 <br> <br>Part of security release: 2.5.8</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla155<p>File uploads with certain extensions were not correctly processed by the File API. This may lead to the creation of files that were executable by Apache. The .htaccess that was saved into the files directory by Drupal should normally prevent execution. The files were only executable when the server was configured to ignore the directives in the .htaccess file. <br> <br>Part of security release SA-CORE-2009-008</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal108<p>Drupal core also had a very limited information disclosure vulnerability under very specific conditions. If a user was tricked into visiting the site via a specially crafted URL and then submits a form (such as the search box) from that page, the information in their form submission may be directed to a third-party site determined by the URL and thus disclosed to the third party. The third party site may then execute a CSRF attack against the submitted form. <br> <br>This vulnerability is limited to forms present on the frontpage. The user login form is not vulnerable. <br> <br>Part of security release SA-CORE-2009-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal105<p>Wordpress does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.<br><br>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0166</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress656<p>Locale module and dependent contributed modules do not sanitize the display of language codes, native and English language names properly. While these usually come from a preselected list, arbitrary administrator input is allowed. This vulnerability is mitigated by the fact that the attacker must have a role with the 'administer languages' permission.<br><br>https://drupal.org/node/731710</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal116<p>A vulnerability was identified that exposes the title or, in some cases, the content of nodes that the user should not have access to. <br> <br>Part of security release SA-CORE-2013-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal129<p>The Overlay module displays administrative pages as a layer over the current page (using JavaScript), rather than replacing the page in the browser window. The Overlay module did not sufficiently validate URLs prior to displaying their contents, leading to an open redirect vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal331<p>XSS via editable slug fields<br><br>http://codex.wordpress.org/Version_3.3.3<br>http://core.trac.wordpress.org/changeset/21083/branches/3.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress17<p>The Taxonomy module provides various listing pages which display content tagged with a particular taxonomy term. Custom or contributed modules may also provide similar lists. Under certain circumstances, unpublished content could appear on these pages and would be visible to users who should not have permission to see it. <br> <br>Part of security release SA-CORE-2014-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal422<p>SQL injection in get_bookmarks()<br><br>http://core.trac.wordpress.org/changeset/18355</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress5<p>The Upload module in Drupal 6 contained privilege escalation vulnerabilities for users with the "upload files" permission. This cuould lead to users being able to edit nodes which they were normally not allowed to, delete any file to which the webserver had sufficient rights, and download attachments of nodes to which they had no access. Harmful files may also be uploaded via cross site request forgeries (CSRF). <br> <br>Part of security release SA-2008-047</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal88<p>The core OpenID module did not correctly implement Form API for the form that allowed one to link user accounts with OpenID identifiers. A malicious user was therefore able to use cross site request forgeries to add attacker controlled OpenID identities to existing accounts. These OpenID identities could then be used to gain access to the affected accounts. <br> <br>Part of security release SA-CORE-2009-008</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal110<p>A vulnerability was identified that exposes the title or, in some cases, the content of nodes that the user should not have access to. <br> <br>Part of security release SA-CORE-2013-001 <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal77<p>Inadequate checking had allowed unauthorised logins via GMail authentication.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1116<p>Inadequate escaping in several form fields leads to XSS vulnerabilities. <br> <br>CVE-2014-7982 <br> <br>Part of security release: 2.5.19 and 3.2.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1117<p>Inadequate escaping had led to SQL injection vulnerability in tags module.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1118<p>Inadequate checking allowed unauthorised logins via LDAP authentication. <br> <br>CVE Number: CVE-2014-6632 <br> <br>Part of security release: 2.5.25, 3.2.5, and 3.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1121<p>Inadequate escaping leads to XSS vulnerability in com_media. <br> <br>CVE-2014-6631 <br> <br>Part of security release: 3.2.5 and 3.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1120<p>It had been possible for a remote attacker to extract a remotely hosted archive while you had been extracting a backup archive / installing an update, depending on your server settings. The attack was not possible at any other time. Merely having Joomla installed had not made your site vulnerable.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTJoomla1122<p>Drupal 7 includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks. <br> <br>A vulnerability in this API allowed an attacker to send specially crafted requests resulting in arbitrary SQL execution. Depending on the content of the requests this could lead to privilege escalation, arbitrary PHP execution, or other attacks. <br> <br>This vulnerability could be exploited by anonymous users. <br> <br>Part of security release SA-CORE-2014-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal1123<p>A specially crafted request could give a user access to another user's session, allowing an attacker to hijack a random session. <br> <br>This attack was known to be possible on certain Drupal 7 sites which serve both HTTP and HTTPS content ("mixed-mode"), but it was possible there are other attack vectors for both Drupal 6 and Drupal 7. <br> <br>Part of security release SA-CORE-2014-006</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal1124<p>Drupal 7 includes a password hashing API to ensure that user supplied passwords are not stored in plain text. <br> <br>A vulnerability in this API allowed an attacker to send specially crafted requests resulting in CPU and memory exhaustion. This may lead to the site becoming unavailable or unresponsive (denial of service). <br> <br>This vulnerability could be exploited by anonymous users. <br> <br>Part of security release SA-CORE-2014-006</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTDrupal1125<p>An extremely unlikely hash collision could allow a user’s account to be compromised, that also required that they haven’t logged in since 2008<br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1139<p>An issue could lead to a denial of service when passwords are checked. <br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.5</li> <li>WordPress 2.5.1</li> <li>WordPress 2.6</li> <li>WordPress 2.6.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1140<p>WordPress now invalidates the links in a password reset email if the user remembers their password, logs in, and changes their email address.<br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1141<p>Wordpress is affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site.<br><br>An attacker could exploit the vulnerability by entering carefully crafted comments, containing program code, on WordPress blog posts and pages. Under default settings comments can be entered by anyone without authentication (login).<br><br>Program code injected in comments would be inadvertedly executed in the blog administrator's web browser when they view the comment. The rogue code could then perform administrative operations by covertly taking over the administror account.<br><br>Such operations - demonstrated by our proof of concept exploits - include creating a new administrator account (with a known password), changing the current administrator password, and in the most serious case, executing attacker-supplied PHP code on the server. This grants the attacker operating system level access on the server hosting WordPress.<br><br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/ and http://klikki.fi/adv/wordpress.html</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1142<p>Better validation of EXIF data is extracted from uploaded photos. <br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.5</li> <li>WordPress 2.5.1</li> <li>WordPress 2.6</li> <li>WordPress 2.6.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1144<p>Additional protections for server-side request forgery attacks when WordPress makes HTTP requests.<br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1145<p>A cross-site request forgery that could be used to trick a user into changing their password.<br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.7.4</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1146<p>A cross-site scripting issue that a contributor or author could use to compromise a site. <br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1147<p>A cross-site scripting issue that a contributor or author could use to compromise a site. <br><br>See https://wordpress.org/news/2014/11/wordpress-4-0-1/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 4.0</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1148<p>WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message. <br> <br>Full Path Disclosure (FPD) during File Upload. <br> <br>http://www.cvedetails.com/cve/CVE-2013-2203/ <br> <br>http://core.trac.wordpress.org/changeset/24464/branches/3.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> </ul> Wed, 04 Mar 2015 16:53:19 GMTWordPress1530<p>Adds protections against brute attacks against CSRF tokens.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> </ul> Wed, 04 Mar 2015 16:53:20 GMTWordPress1055<p>Password reset URLs could be forged under certain circumstances, allowing an attacker to gain access to another user's account without knowing the account's password. <br> <br>Part of security release SA-CORE-2015-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> </ul> Thu, 19 Mar 2015 16:48:28 GMTDrupal1310<p>Drupal core frequently uses a "destination" query string parameter in URLs to redirect users to a new destination after completing an action on the current page. Under certain circumstances, malicious users can use this parameter to construct a URL that will trick users into being redirected to a 3rd party website, thereby exposing the users to potential social engineering attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> </ul> Sat, 21 Mar 2015 00:31:01 GMTDrupal1329<p>Using this vulnerability, an attacker using a carefully crafted query could insert malicious scripts to the plugin’s cached file listing page. As this page requires a valid nonce in order to be displayed, a successful exploitation would require the site’s administrator to have a look at that particular section, manually.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WP Supercache 0.9.7</li> <li>WP Supercache 0.9.8</li> <li>WP Supercache 0.9.9</li> <li>WP Supercache 0.9.9.1</li> <li>WP Supercache 0.9.9.2</li> <li>WP Supercache 0.9.9.3</li> <li>WP Supercache 0.9.9.4</li> <li>WP Supercache 0.9.9.5</li> <li>WP Supercache 0.9.9.6</li> <li>WP Supercache 0.9.9.7</li> <li>WP Supercache 0.9.9.8</li> <li>WP Supercache 0.9.9.9</li> <li>WP Supercache 1.0</li> <li>WP Supercache 1.1</li> <li>WP Supercache 1.2</li> <li>WP Supercache 1.3.1</li> <li>WP Supercache 1.3.2</li> <li>WP Supercache 1.4</li> <li>WP Supercache 1.4.1</li> <li>WP Supercache 1.4.2</li> </ul> Thu, 16 Apr 2015 13:23:03 GMTWP Supercache1349<p>In WordPress 4.1 and higher, files with invalid or unsafe names could be uploaded.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> </ul> Wed, 22 Apr 2015 17:21:43 GMTWordPress1351<p>WordPress versions 4.1.1 and earlier are affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> </ul> Wed, 22 Apr 2015 17:21:43 GMTWordPress1350<p>SQL injection vulnerability through ordering</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.5.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> </ul> Wed, 22 Apr 2015 17:21:43 GMTWordPress1352<p>The WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 4.0.3</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.2</li> </ul> Tue, 28 Apr 2015 20:13:24 GMTWordPress1360<p>Any WordPress Plugin or theme that leverages the genericons package is vulnerable to a DOM-based Cross-Site Scripting (XSS) vulnerability due to an insecure file included with genericons. Any plugin that makes use of this package is potentially vulnerable if it includes the example.html file that comes with the package.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.0.34</li> <li>WordPress 4.0.35</li> <li>WordPress 4.0.36</li> <li>WordPress 4.0.37</li> <li>WordPress 4.0.38</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>Genericons 3.0.3</li> <li>Genericons 3.1</li> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> </ul> Thu, 07 May 2015 23:27:17 GMTGenericons1361<p>Insufficient randomness leads to password reset vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> </ul> Fri, 26 Jun 2015 19:14:58 GMTJoomla1529<p>Inadequate checking of the return value had allowed redirecting to an external page.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2-rc</li> </ul> Mon, 06 Jul 2015 16:38:19 GMTJoomla1363<p>It is possible for a user with Subscriber permissions to create a draft through Quick Draft.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> </ul> Tue, 04 Aug 2015 11:58:13 GMTWordPress1364<p>WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1365<p>WordPress 4.2.3 and earlier allow an attacker to lock posts. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5731 <br> <br>https://core.trac.wordpress.org/changeset/33542</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1378<p>WordPress 4.2.3 and earlier are vulnerable to a timing side-channel attack. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5730 <br> <br>https://core.trac.wordpress.org/changeset/33535</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1377<p>WordPress 4.2.3 and earlier are vulnerable to a SQL injection in comment posting due to insufficient escaping. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2213 <br> <br>https://core.trac.wordpress.org/changeset/33555</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1376<p>WordPress 4.2.3 and earlier are vulnerable to a XSS vulnerability through broken links on the legacy theme preview. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5734 <br> <br>https://core.trac.wordpress.org/changeset/33549</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1381<p>WordPress 4.2.3 and earlier are vulnerable to a cross-site scripting vulnerability where navigation titles were insufficiently escaped. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5733 <br> <br>https://core.trac.wordpress.org/changeset/33540</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1380<p>WordPress 4.2.3 and earlier are affected by a cross-site scripting vulnerability where widget titles were not properly escaped. <br> <br>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5732 <br> <br>https://core.trac.wordpress.org/changeset/33529</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> </ul> Thu, 17 Sep 2015 18:30:43 GMTWordPress1379<p>Inadequate ACL checks in com_contenthistory had provided potential read access to data which should be access restricted. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> </ul> Fri, 23 Oct 2015 17:24:46 GMTJoomla1390<p>Browser information had not been filtered properly while saving the session values into the database which leads to a Remote Code Execution vulnerability. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> </ul> Fri, 23 Oct 2015 17:24:46 GMTJoomla1391<p>Inadequate filtering of request data had led to a SQL injection vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> </ul> Fri, 23 Oct 2015 17:24:46 GMTJoomla1389<p>Inadequate escaping leads to XSS vulnerability in login module. <br> <br>CVE-2015-6939 <br> <br>Part of security release: 3.4.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> </ul> Fri, 23 Oct 2015 17:24:46 GMTJoomla1388<p>Add additional CSRF hardening in com_templates had allowed remote attackers to hijack the authentication of unspecified victims via unknown vectors.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> </ul> Mon, 21 Dec 2015 12:09:56 GMTJoomla1397<p>Inadequate filtering of request data leads to a directory traversal vulnerability. <br> <br>CVE Number: CVE-2015-8565 <br> <br>Part of security release: 3.4.6</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> </ul> Mon, 21 Dec 2015 12:09:56 GMTJoomla1398<p>Failure to properly sanitise input data from the XML install file located within an extension's package archive had allowed for directory traversal. <br> <br>CVE Number: CVE-2015-8564 <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> </ul> Mon, 21 Dec 2015 12:09:56 GMTJoomla1399<p>Browser information had not been filtered properly while saving the session values into the database which had led to a remote code execution vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> </ul> Mon, 21 Dec 2015 17:46:33 GMTJoomla1392<p>WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.4</li> <li>Akismet 2.5.3</li> <li>Akismet 2.5.6</li> <li>Akismet 2.5.7</li> <li>Akismet 2.5.8</li> <li>Akismet 2.5.9</li> <li>Akismet 2.6.0</li> <li>Akismet 3.0.0</li> <li>Akismet 3.0.1</li> <li>Akismet 3.0.2</li> <li>Akismet 3.0.4</li> <li>Akismet 3.1</li> <li>Akismet 3.1.1</li> <li>Akismet 3.1.3</li> </ul> Mon, 11 Jan 2016 12:17:13 GMTWordPress1408<p>WordPress version 4.4.1 and previous are vulnerable to an open redirection attack. <br> <br>A open redirect is a vulnerability which can be used to get access without having the proper authorization. This vulnerability can be used in phishing attacks. <br> <br>https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.3</li> <li>WordPress 2.3.1</li> <li>WordPress 2.3.2</li> <li>WordPress 2.3.3</li> <li>WordPress 2.5</li> <li>WordPress 2.5.1</li> <li>WordPress 2.6</li> <li>WordPress 2.6.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> </ul> Thu, 04 Feb 2016 11:07:41 GMTWordPress1410<p>WordPress version 4.4.1 and previous contain a possible Server Side Request Forgery (SSRF) exploit in the HTTP URL validator. <br> <br>https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> </ul> Thu, 04 Feb 2016 11:07:41 GMTWordPress1409<p>The XML-RPC system allowed a large number of calls to the same method to be made at once, which could be used as an enabling factor in brute force attacks (for example, attempting to determine user passwords by submitting a large number of password variations at once). <br> <br>This vulnerability is mitigated by the fact that you must have enabled a module that provides an XML-RPC method that was vulnerable to brute-forcing. There are no such modules in Drupal 7 core, but Drupal 6 core is vulnerable via the Blog API module. It is additionally mitigated if flood control protection is in place for the method in question. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> </ul> Mon, 29 Feb 2016 20:46:12 GMTDrupal1426<p>A vulnerability existed in the File module that allowed a malicious user to view, delete or substitute a link to a file that the victim had uploaded to a form while the form had not yet been submitted and processed. If an attacker carried out this attack continuously, all file uploads to a site could be blocked by deleting all temporary files before they could be saved. <br> <br>This vulnerability is mitigated by the fact that the attacker must have permission to create content or comment and upload files as part of that process. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> </ul> Mon, 29 Feb 2016 20:46:12 GMTDrupal1422<p>The current path could be populated with an external URL. This could lead to open redirect vulnerabilities. <br> <br>This vulnerability is mitigated by the fact that it would only occur in combination with custom code, or in certain cases if a user submits a form shown on a 404 page with a specially crafted URL. <br> <br>For Drupal 6, this patch also solves: Open redirect via double-encoded 'destination' parameter <br> <br>The drupal_goto() function in Drupal 6 improperly decodes the contents of $_REQUEST['destination'] before using it, which allows the function's open redirect protection to be bypassed and allows an attacker to initiate a redirect to an arbitrary external URL. <br> <br>This vulnerability is mitigated by that fact that the attack is not possible for sites running on PHP 5.4.7 or greater. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> </ul> Mon, 29 Feb 2016 20:46:12 GMTDrupal1427<p>An access bypass vulnerability was found that allows input to be submitted, for example using JavaScript, for form button elements that a user is not supposed to have access to because the button was blocked by setting #access to FALSE in the server-side form definition. <br> <br>This vulnerability is mitigated by the fact that the attacker must have access to submit a form that has such buttons defined for it (for example, a form that both administrators and non-administrators can access, but where administrators have additional buttons available to them). <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> </ul> Mon, 29 Feb 2016 20:46:12 GMTDrupal1429<p>On certain older versions of PHP, user-provided data stored in a Drupal session may be unserialized leading to possible remote code execution. <br> <br>This issue is mitigated by the fact that it requires an unusual set of circumstances to exploit and depends on the particular Drupal code that is running on the site. It is also believed to be mitigated by upgrading to PHP 5.4.45, 5.5.29, 5.6.13, or any higher version. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> </ul> Mon, 29 Feb 2016 20:46:12 GMTDrupal1433<p>Drupal core has a reflected file download vulnerability that could allow an attacker to trick a user into downloading and running a file with arbitrary JSON-encoded content. <br> <br>This vulnerability is mitigated by the fact that the victim must be a site administrator and that the full version of the attack only works with certain web browsers. <br> <br>https://www.drupal.org/SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> </ul> Thu, 03 Mar 2016 13:00:26 GMTDrupal1428<p>In certain configurations where a user's email addresses could be used to log in instead of their username, links to "have you forgotten your password" could reveal the username associated with a particular email address, leading to an information disclosure vulnerability. <br> <br>This issue is mitigated by the fact that it requires a contributed module to be installed that permits logging in with an email address, and that it is only relevant on sites where usernames are typically chosen to hide the users' real-life identities. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> </ul> Thu, 03 Mar 2016 13:00:26 GMTDrupal1432<p>A vulnerability in the drupal_set_header() function allowed an HTTP header injection attack to be performed if user-generated content was passed as a header value on sites running PHP versions older than 5.1.2. If the content contains line breaks the user may be able to set arbitrary headers of their own choosing. <br> <br>This vulnerability is mitigated by the fact that most hosts have newer versions of PHP installed, and that it requires a module to be installed on the site that allows user-submitted data to appear in HTTP headers. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> </ul> Thu, 03 Mar 2016 13:00:26 GMTDrupal1430<p>Some specific contributed or custom code may call Drupal's user_save() API in a manner different than Drupal core. Depending on the data that has been added to a form or the array prior to saving, this could lead to a user gaining all roles on a site. <br> <br>This issue is mitigated by the fact that it requires contributed or custom code that calls user_save() with an explicit category and code that loads all roles into the array. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> </ul> Mon, 07 Mar 2016 18:02:16 GMTDrupal1431<p>Inadequate filtering of request data had led to a SQL injection vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> </ul> Fri, 11 Mar 2016 13:13:38 GMTJoomla1401<p>In previous versions the compression option contains a cross-site request forgery (CSRF) vulnerability that can be exploited by hackers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> </ul> Tue, 19 Apr 2016 09:55:40 GMTWordPress1507<p>Previous versions contain a possible Cross-Site Scripting (XSS) exploit on the network settings page that can be exploited by hackers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> </ul> Tue, 19 Apr 2016 09:55:40 GMTWordPress1506<p>Previous versions contain a possible Server Side Request Forgery (SSRF) exploit in the HTTP URL validator by using Octal & Hexedecimal IP addresses.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> </ul> Tue, 19 Apr 2016 09:55:40 GMTWordPress1505<p>Previous versions contain a possible Cross-Site Scripting (XSS) exploit on the network settings page that can be exploited by hackers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> </ul> Wed, 18 May 2016 14:33:03 GMTWordPress1513<p>Drupal core has a reflected file download vulnerability that could allow an attacker to trick a user into downloading and running a file with arbitrary JSON-encoded content. <br> <br>This vulnerability is mitigated by the fact that the victim must be a site administrator and that the full version of the attack only works with certain web browsers. <br> <br>https://www.drupal.org/SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> </ul> Wed, 18 May 2016 14:33:03 GMTDrupal1515<p>Inadequate filtering of request data had led to a SQL injection vulnerability. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> </ul> Wed, 18 May 2016 14:33:03 GMTJoomla1514<p>On certain older versions of PHP, user-provided data stored in a Drupal session may be unserialized leading to possible remote code execution. <br> <br>This issue is mitigated by the fact that it requires an unusual set of circumstances to exploit and depends on the particular Drupal code that is running on the site. It is also believed to be mitigated by upgrading to PHP 5.4.45, 5.5.29, 5.6.13, or any higher version. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> </ul> Wed, 18 May 2016 14:33:03 GMTDrupal1517<p>Some specific contributed or custom code may call Drupal's user_save() API in a manner different than Drupal core. Depending on the data that has been added to a form or the array prior to saving, this could lead to a user gaining all roles on a site. <br> <br>This issue is mitigated by the fact that it requires contributed or custom code that calls user_save() with an explicit category and code that loads all roles into the array. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> </ul> Wed, 18 May 2016 14:33:03 GMTDrupal1516<p>A hacker may acquire administrator rights using a custom Drupal module hat performs a form rebuild during submission of the user profile form. <br> <br>Part of security release SA-CORE-2016-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 5.0</li> <li>Drupal 5.1</li> <li>Drupal 5.2</li> <li>Drupal 5.3</li> <li>Drupal 5.4</li> <li>Drupal 5.5</li> <li>Drupal 5.6</li> <li>Drupal 5.7</li> <li>Drupal 5.8</li> <li>Drupal 5.9</li> <li>Drupal 5.10</li> <li>Drupal 5.11</li> <li>Drupal 5.12</li> <li>Drupal 5.13</li> <li>Drupal 5.14</li> <li>Drupal 5.15</li> <li>Drupal 5.16</li> <li>Drupal 5.17</li> <li>Drupal 5.18</li> <li>Drupal 5.19</li> <li>Drupal 5.20</li> <li>Drupal 5.21</li> <li>Drupal 5.22</li> <li>Drupal 5.23</li> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTDrupal1534<p>Redirect bypass in the customizer. <br> <br>https://wordpress.org/news/2016/06/wordpress-4-5-3/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1562<p>Revision history information disclosure, reported independently by John Blackbourn from the WordPress security team and by Dan Moen. <br> <br>https://codex.wordpress.org/Version_4.5.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.6</li> <li>WordPress 2.6.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1564<p>Two different XSS problems via attachment names, reported by Jouko Pynnönen and Divyesh Prajapati <br> <br>https://codex.wordpress.org/Version_4.5.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1563<p>Less secure sanitize_file_name edge cases reported by Peter Westwood of the WordPress security team <br> <br>https://codex.wordpress.org/Version_4.5.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1567<p>oEmbed denial of service reported by Jennifer Dodd from Automattic <br> <br>https://wordpress.org/news/2016/06/wordpress-4-5-3/</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1561<p>Password change via stolen cookie, reported by Michael Adams from the WordPress security team. <br> <br>https://codex.wordpress.org/Version_4.5.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Wed, 29 Jun 2016 10:57:28 GMTWordPress1566<p>Unauthorized category removal from a post, reported by David Herrera from Alley Interactive <br> <br>https://codex.wordpress.org/Version_4.5.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> </ul> Thu, 30 Jun 2016 11:08:08 GMTWordPress1565<p>The Webform Multifile File Upload module contains a Remote Code Execution (RCE) vulnerability where form inputs will be unserialized and a specially crafted form input may trigger arbitrary code execution depending on the libraries available on a site. <br> <br>This vulnerability is mitigated by the fact that an attacker must have the ability to submit a Webform with a Multiple File Input field. Further, a site must have an object defined with methods that are invoked at wake/destroy that include code that can be leveraged for malicious purposes. Drupal 7 Core contains one such class which can be used to delete arbitrary files, but contributed or custom classes may include methods that can be leveraged for RCE.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal Module Webform Multifile 6.x-1.0</li> <li>Drupal Module Webform Multifile 6.x-1.1</li> <li>Drupal Module Webform Multifile 6.x-1.2</li> <li>Drupal Module Webform Multifile 6.x-1.3</li> <li>Drupal Module Webform Multifile 7.x-1.2</li> <li>Drupal Module Webform Multifile 7.x-1.3</li> </ul> Thu, 14 Jul 2016 10:03:11 GMTDrupal Module Webform Multifile1608<p>The Coder module checks your Drupal code against coding standards and other best practices. It can also fix coding standard violations and perform basic upgrades on modules. <br> <br>The module doesn't sufficiently validate user inputs in a script file that has the php extension. A malicious unauthenticated user can make requests directly to this file to execute arbitrary php code. <br> <br>There are no mitigating factors. The module does not need to be enabled for this to be exploited. Its presence on the file system and being reachable from the web are sufficient.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal Module Coder 7.x-1.0</li> <li>Drupal Module Coder 7.x-1.0-beta5</li> <li>Drupal Module Coder 7.x-1.0-beta6</li> <li>Drupal Module Coder 7.x-1.1</li> <li>Drupal Module Coder 7.x-1.2</li> <li>Drupal Module Coder 7.x-2.0</li> <li>Drupal Module Coder 7.x-2.0-beta1</li> <li>Drupal Module Coder 7.x-2.0-beta2</li> <li>Drupal Module Coder 7.x-2.1</li> <li>Drupal Module Coder 7.x-2.2</li> <li>Drupal Module Coder 7.x-2.3</li> <li>Drupal Module Coder 7.x-2.4</li> <li>Drupal Module Coder 7.x-2.5</li> <li>Drupal Module Coder 8.x-2.0-alpha1</li> </ul> Thu, 14 Jul 2016 10:03:11 GMTDrupal Module Coder1610<p>RESTWS alters the default page callbacks for entities to provide additional functionality. <br> <br>A vulnerability in this approach allows an attacker to send specially crafted requests resulting in arbitrary PHP execution. <br> <br>There are no mitigating factors. This vulnerability can be exploited by anonymous users.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal Module RESTWS 7.x-1.0</li> <li>Drupal Module RESTWS 7.x-1.0-beta1</li> <li>Drupal Module RESTWS 7.x-1.0-beta2</li> <li>Drupal Module RESTWS 7.x-1.1</li> <li>Drupal Module RESTWS 7.x-1.2</li> <li>Drupal Module RESTWS 7.x-1.3</li> <li>Drupal Module RESTWS 7.x-1.4</li> <li>Drupal Module RESTWS 7.x-1.5</li> <li>Drupal Module RESTWS 7.x-1.6</li> <li>Drupal Module RESTWS 7.x-2.0</li> <li>Drupal Module RESTWS 7.x-2.0-alpha1</li> <li>Drupal Module RESTWS 7.x-2.0-alpha2</li> <li>Drupal Module RESTWS 7.x-2.0-alpha3</li> <li>Drupal Module RESTWS 7.x-2.0-alpha4</li> <li>Drupal Module RESTWS 7.x-2.0-alpha5</li> <li>Drupal Module RESTWS 7.x-2.1</li> <li>Drupal Module RESTWS 7.x-2.2</li> <li>Drupal Module RESTWS 7.x-2.3</li> <li>Drupal Module RESTWS 7.x-2.4</li> <li>Drupal Module RESTWS 7.x-2.5</li> </ul> Thu, 14 Jul 2016 10:03:11 GMTDrupal Module RESTWS1609<p>Drupal 8 uses the third-party PHP library Guzzle for making server-side HTTP requests. An attacker could provide a proxy server that Guzzle will use. The details of this are explained at https://httpoxy.org/. <br> <br>Part of security release SA-CORE-2016-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> </ul> Mon, 18 Jul 2016 19:05:16 GMTDrupal1611<p>Inadequate escaping leads to XSS vulnerability in mail component. <br> <br>Part of security release: 3.6.1</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> </ul> Fri, 05 Aug 2016 10:36:02 GMTJoomla1613<p>Inadequate ACL checks in com_content had provided potential read access to data which should be access restricted to users with edit_own level. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> </ul> Fri, 05 Aug 2016 10:36:02 GMTJoomla1614<p>Hackers can abuse the file image upload filename to execute a "cross-site scripting" (XSS) attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 2.5</li> <li>WordPress 2.5.1</li> <li>WordPress 2.6</li> <li>WordPress 2.6.1</li> <li>WordPress 2.6.2</li> <li>WordPress 2.6.3</li> <li>WordPress 2.6.5</li> <li>WordPress 2.7</li> <li>WordPress 2.7.1</li> <li>WordPress 2.8</li> <li>WordPress 2.8.1</li> <li>WordPress 2.8.2</li> <li>WordPress 2.8.3</li> <li>WordPress 2.8.4</li> <li>WordPress 2.8.5</li> <li>WordPress 2.8.6</li> <li>WordPress 2.9</li> <li>WordPress 2.9.1</li> <li>WordPress 2.9.2</li> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.6</li> </ul> Thu, 08 Sep 2016 12:40:32 GMTWordPress1616<p>A user that has access to the upgrader module can use a specially crafted filename to upload a file in different location.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.6</li> </ul> Thu, 08 Sep 2016 12:40:32 GMTWordPress1617<p>An attacker could create a specially crafted url, which could execute arbitrary code in the victim’s browser if loaded. Drupal was not properly sanitizing an exception</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> </ul> Thu, 22 Sep 2016 15:05:05 GMTDrupal1621<p>Users who have rights to edit a node, can set the visibility on comments for that node. This should be restricted to those who have the administer comments permission. <br> <br>Part of security patch SA-CORE-2016-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> </ul> Thu, 22 Sep 2016 15:05:05 GMTDrupal1623<p>The system.temporary route would allow the download of a full config export. The full config export should be limited to those with Export configuration permission. <br> <br>Part of security release SA-CORE-2016-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> </ul> Thu, 22 Sep 2016 15:05:05 GMTDrupal1622<p>Inadequate checks allows for users to register on a site when registration has been disabled. <br> <br>Incorrect use of unfiltered data allows for users to register on a site with elevated privileges. <br> <br>CVE Number: CVE-2016-8870/CVE-2016-8869 <br> <br>Part of security release: 3.6.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> </ul> Tue, 25 Oct 2016 15:24:44 GMTJoomla1625<p>Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by implementing hook_query_alter() or hook_query_TAG_alter() in order to add additional conditions. Queries can be distinguished by means of query tags. As the documentation on EntityFieldQuery::addTag() suggests, access-tags on entity queries normally follow the form ENTITY_TYPE_access (e.g. node_access). However, the taxonomy module's access query tag predated this system and used term_access as the query tag instead of taxonomy_term_access. <br> <br>As a result, before this security release modules wishing to restrict access to taxonomy terms may have implemented an unsupported tag, or needed to look for both tags (term_access and taxonomy_term_access) in order to be compatible with queries generated both by Drupal core as well as those generated by contributed modules like Entity Reference. Otherwise information on taxonomy terms might have been disclosed to unprivileged users. <br> <br>Part of security release SA-CORE-2016-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> </ul> Fri, 18 Nov 2016 11:54:09 GMTDrupal1741<p>Under certain circumstances, malicious users could construct a URL to a confirmation form that would trick users into being redirected to a 3rd party website after interacting with the form, thereby exposing the users to potential social engineering attacks. <br> <br>Part of security release SA-CORE-2016-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> </ul> Fri, 18 Nov 2016 11:54:09 GMTDrupal1739<p>The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context. <br> <br>Part of security release SA-CORE-2016-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> </ul> Fri, 18 Nov 2016 11:54:09 GMTDrupal1738<p>A specially crafted URL could cause a denial of service via the transliterate mechanism. <br> <br>Part of security release SA-CORE-2016-005</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> </ul> Fri, 18 Nov 2016 11:54:09 GMTDrupal1740<p>Inadequate filesystem checks allowed files with alternative PHP file extensions to be uploaded. <br> <br>CVE Number: CVE-2016-9836 <br> <br>Part of security release: 3.6.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> </ul> Wed, 14 Dec 2016 15:36:25 GMTJoomla1743<p>Incorrect use of unfiltered data stored to the session on a form validation failure had allowed for existing user accounts to be modified; to include resetting their username, password, and user group assignments. <br> <br>CVE Number: CVE-2016-9838 <br> <br>Part of security release: 3.6.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> </ul> Wed, 14 Dec 2016 15:36:25 GMTJoomla1744<p>Inadequate ACL checks in the Beez3 com_content article layout override had enabled a user to view restricted content.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> </ul> Wed, 14 Dec 2016 15:36:25 GMTJoomla1742<p>An independent researcher uncovered a critical vulnerability in PHPMailer that could potentially be used by (unauthenticated) remote attackers to achieve remote arbitrary code execution in the context of the web server user and remotely compromise the target web application. <br> <br>To exploit the vulnerability an attacker could target common website components such as contact/feedback forms, registration forms, password email resets and others that send out emails with the help of a vulnerable version of the PHPMailer class.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Tue, 27 Dec 2016 14:27:40 GMTWordPress1748<p>An independent researcher uncovered a critical vulnerability in PHPMailer that could potentially be used by (unauthenticated) remote attackers to achieve remote arbitrary code execution in the context of the web server user and remotely compromise the target web application. <br> <br>To exploit the vulnerability an attacker could target common website components such as contact/feedback forms, registration forms, password email resets and others that send out emails with the help of a vulnerable version of the PHPMailer class.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>ownCloud 7.0.0</li> <li>ownCloud 7.0.1</li> <li>ownCloud 7.0.2</li> <li>ownCloud 7.0.3</li> <li>ownCloud 7.0.4</li> <li>ownCloud 7.0.5</li> <li>ownCloud 7.0.6</li> <li>ownCloud 7.0.7</li> <li>ownCloud 7.0.8</li> <li>ownCloud 7.0.10</li> <li>ownCloud 7.0.11</li> <li>ownCloud 7.0.12</li> <li>ownCloud 8.0.0</li> <li>ownCloud 8.0.2</li> <li>ownCloud 8.0.3</li> <li>ownCloud 8.0.4</li> <li>ownCloud 8.0.5</li> <li>ownCloud 8.0.6</li> <li>ownCloud 8.0.8</li> <li>ownCloud 8.0.9</li> <li>ownCloud 8.0.10</li> <li>LimeSurvey 1.1.0</li> <li>LimeSurvey 2.05+140730</li> <li>LimeSurvey 2.05+140811</li> <li>LimeSurvey 2.05+140821</li> <li>LimeSurvey 2.05+140902</li> <li>LimeSurvey 2.05+140911</li> <li>LimeSurvey 2.05+140915</li> <li>LimeSurvey 2.05+141003</li> <li>LimeSurvey 2.05+141020</li> <li>LimeSurvey 2.05+141109</li> <li>LimeSurvey 2.05+141110</li> <li>LimeSurvey 2.05+141113</li> <li>LimeSurvey 2.05+141123</li> <li>LimeSurvey 2.05+141126</li> <li>LimeSurvey 2.05+141210</li> <li>LimeSurvey 2.05+141229</li> <li>LimeSurvey 2.05+150211</li> <li>LimeSurvey 2.05+150310</li> <li>LimeSurvey 2.05+150413</li> <li>LimeSurvey 2.05+150508</li> <li>LimeSurvey 2.05+150520</li> <li>LimeSurvey 2.06+150611</li> <li>LimeSurvey 2.06+150612</li> <li>LimeSurvey 2.06+150619</li> <li>LimeSurvey 2.06+150629</li> <li>LimeSurvey 2.06+150723</li> <li>LimeSurvey 2.06+150730</li> <li>LimeSurvey 2.06+150731</li> <li>LimeSurvey 2.06+150824</li> <li>LimeSurvey 2.06+150831</li> <li>LimeSurvey 2.06+151016</li> <li>LimeSurvey 2.06+151018</li> <li>LimeSurvey 2.06+151109</li> <li>LimeSurvey 2.06+151126</li> <li>LimeSurvey 2.06+151205</li> <li>LimeSurvey 2.06+151215</li> <li>LimeSurvey 2.06+160123</li> <li>LimeSurvey 2.06+160129</li> <li>LimeSurvey 2.06+150729</li> <li>LimeSurvey 2.06+150812</li> <li>LimeSurvey 2.06+150825</li> <li>LimeSurvey 2.06+150911</li> <li>LimeSurvey 2.06+150930</li> <li>LimeSurvey 2.06+151014</li> <li>LimeSurvey 2.06+160121</li> <li>LimeSurvey 2.06RC1</li> <li>LimeSurvey 2.06RC2</li> <li>LimeSurvey 2.50.1</li> <li>LimeSurvey 2.50+160202</li> <li>LimeSurvey 2.50+160204</li> <li>LimeSurvey 2.50+160206</li> <li>LimeSurvey 2.50+160210</li> <li>LimeSurvey 2.50+160212</li> <li>LimeSurvey 2.50+160215</li> <li>LimeSurvey 2.50+160216</li> <li>LimeSurvey 2.50+160218</li> <li>LimeSurvey 2.50+160219</li> <li>LimeSurvey 2.50+160222</li> <li>LimeSurvey 2.50+160223</li> <li>LimeSurvey 2.50+160225</li> <li>LimeSurvey 2.50+160228</li> <li>LimeSurvey 2.50+160307</li> <li>LimeSurvey 2.50+160308</li> <li>LimeSurvey 2.50+160311</li> <li>LimeSurvey 2.50+160316</li> <li>LimeSurvey 2.50+160401</li> <li>LimeSurvey 2.50+160404</li> <li>LimeSurvey 2.50+160405</li> <li>LimeSurvey 2.50+160411</li> <li>LimeSurvey 2.50+160413</li> <li>LimeSurvey 2.50+160414</li> <li>LimeSurvey 2.50+160415</li> <li>LimeSurvey 2.50+160418</li> <li>LimeSurvey 2.50+160421</li> <li>LimeSurvey 2.50+160428</li> <li>LimeSurvey 2.50+160430</li> <li>LimeSurvey 2.50+160504</li> <li>LimeSurvey 2.50+160506</li> <li>LimeSurvey 2.50+160512</li> <li>LimeSurvey 2.50+160517</li> <li>LimeSurvey 2.50+160523</li> <li>LimeSurvey 2.50+160526</li> <li>LimeSurvey 2.50+160602</li> <li>LimeSurvey 2.50+160606</li> <li>LimeSurvey 2.50+160613</li> <li>LimeSurvey 2.50+160614</li> <li>LimeSurvey 2.50+160616</li> <li>LimeSurvey 2.50+160620</li> <li>LimeSurvey 2.50+160715</li> <li>LimeSurvey 2.50+160718</li> <li>LimeSurvey 2.50+160726</li> <li>LimeSurvey 2.50+160731</li> <li>LimeSurvey 2.50+160804</li> <li>LimeSurvey 2.50+160816</li> <li>LimeSurvey 2.50+160817</li> <li>LimeSurvey 2.50+160213</li> <li>LimeSurvey 2.50+160217</li> <li>LimeSurvey 2.50+160309</li> <li>LimeSurvey 2.50+160310</li> <li>LimeSurvey 2.50+160314</li> <li>LimeSurvey 2.50+160317</li> <li>LimeSurvey 2.50+160323</li> <li>LimeSurvey 2.50+160330</li> <li>LimeSurvey 2.50+160407</li> <li>LimeSurvey 2.50+160408</li> <li>LimeSurvey 2.50+160412</li> <li>LimeSurvey 2.50+160425</li> <li>LimeSurvey 2.50+160426</li> <li>LimeSurvey 2.50+160503</li> <li>LimeSurvey 2.50+160516</li> <li>LimeSurvey 2.50+160525</li> <li>LimeSurvey 2.50+160529</li> <li>LimeSurvey 2.50+160603</li> <li>LimeSurvey 2.50+160714</li> <li>LimeSurvey 2.50+160725</li> <li>LimeSurvey 2.50+160727</li> <li>LimeSurvey 2.50+160728</li> <li>LimeSurvey 2.50+160810</li> <li>LimeSurvey 2.50+160812</li> <li>LimeSurvey 2.50RC1</li> <li>LimeSurvey 2.50RC2</li> <li>LimeSurvey 2.50RC3</li> <li>LimeSurvey 2.50RC4</li> <li>LimeSurvey 2.50RC5</li> <li>LimeSurvey 2.50RC6</li> <li>LimeSurvey 2.50RC7</li> <li>LimeSurvey 2.50RC8</li> <li>LimeSurvey 2.51.0</li> <li>LimeSurvey 2.51.1</li> <li>LimeSurvey 2.51.2</li> <li>LimeSurvey 2.51.3</li> <li>LimeSurvey 2.51.4</li> <li>LimeSurvey 2.51.4+160908</li> <li>LimeSurvey 2.52+160929</li> <li>LimeSurvey 2.53+161004</li> <li>LimeSurvey 2.54.1+161010</li> <li>LimeSurvey 2.54+161007</li> <li>LimeSurvey 2.54.2+161012</li> <li>LimeSurvey 2.54.3+161014</li> <li>LimeSurvey 2.54.4+161018</li> <li>LimeSurvey 2.54.5+161019</li> <li>LimeSurvey 2.55.1+161026</li> <li>LimeSurvey 2.55+161021</li> <li>LimeSurvey 2.55.2+161103</li> <li>LimeSurvey 2.55.3+161111</li> <li>LimeSurvey 2.56.1+161118</li> <li>LimeSurvey 2.56+161117</li> <li>LimeSurvey 2.57.0+161202</li> <li>LimeSurvey 2.57.1+161205</li> <li>MODX 2.3.0-pl</li> <li>MODX 2.3.1-pl</li> <li>MODX 2.3.2-pl</li> <li>MODX 2.3.3-pl</li> <li>MODX 2.3.4-pl</li> <li>MODX 2.3.5-pl</li> <li>MODX 2.3.6-pl</li> <li>MODX 2.4.0-pl</li> <li>MODX 2.4.1-pl</li> <li>MODX 2.4.2-pl</li> <li>MODX 2.4.3-pl</li> <li>MODX 2.4.4-pl</li> <li>MODX 2.5.0-pl</li> <li>MODX 2.5.1-pl</li> <li>MODX 2.5.2-pl</li> <li>Booked 2.6</li> <li>phpList 3.0.9</li> <li>phpList 3.0.10</li> <li>phpList 3.0.11</li> <li>phpList 3.0.12</li> <li>phpList 3.2.0</li> <li>phpList 3.2.1</li> <li>phpList 3.2.2</li> <li>phpList 3.2.3</li> <li>phpList 3.2.4</li> <li>phpList 3.2.5</li> <li>phpList 3.2.6</li> <li>XOOPS 2.5.8</li> <li>XOOPS 2.5.8-beta1</li> <li>XOOPS 2.5.8-rc1</li> <li>XOOPS 2.5.8-rc2</li> <li>XOOPS 2.5.8-rc3</li> <li>PHPMailer 5.0.0</li> <li>PHPMailer 5.0.2</li> <li>PHPMailer 5.1</li> <li>PHPMailer 5.1.0</li> <li>PHPMailer 5.2.4</li> <li>PHPMailer 5.2.5</li> <li>PHPMailer 5.2.6</li> <li>PHPMailer 5.2.7</li> <li>PHPMailer 5.2.8</li> <li>PHPMailer 5.2.9</li> <li>PHPMailer 5.2.10</li> <li>PHPMailer 5.2.11</li> <li>PHPMailer 5.2.12</li> <li>PHPMailer 5.2.13</li> <li>PHPMailer 5.2.14</li> <li>PHPMailer 5.2.15</li> <li>PHPMailer 5.2.16</li> <li>PHPMailer 5.2.17</li> </ul> Tue, 27 Dec 2016 14:27:40 GMTPHPMailer1747<p>An independent researcher uncovered a critical vulnerability in PHPMailer that could potentially be used by (unauthenticated) remote attackers to achieve remote arbitrary code execution in the context of the web server user and remotely compromise the target web application. <br> <br>To exploit the vulnerability an attacker could target common website components such as contact/feedback forms, registration forms, password email resets and others that send out emails with the help of a vulnerable version of the PHPMailer class. <br> <br>This patch follows and supersedes the patch for CVE-2016-1033.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>ownCloud 7.0.0</li> <li>ownCloud 7.0.1</li> <li>ownCloud 7.0.2</li> <li>ownCloud 7.0.3</li> <li>ownCloud 7.0.4</li> <li>ownCloud 7.0.5</li> <li>ownCloud 7.0.6</li> <li>ownCloud 7.0.7</li> <li>ownCloud 7.0.8</li> <li>ownCloud 7.0.10</li> <li>ownCloud 7.0.11</li> <li>ownCloud 7.0.12</li> <li>ownCloud 8.0.0</li> <li>ownCloud 8.0.2</li> <li>ownCloud 8.0.3</li> <li>ownCloud 8.0.4</li> <li>ownCloud 8.0.5</li> <li>ownCloud 8.0.6</li> <li>ownCloud 8.0.8</li> <li>ownCloud 8.0.9</li> <li>ownCloud 8.0.10</li> <li>LimeSurvey 1.1.0</li> <li>LimeSurvey 2.05+140730</li> <li>LimeSurvey 2.05+140811</li> <li>LimeSurvey 2.05+140821</li> <li>LimeSurvey 2.05+140902</li> <li>LimeSurvey 2.05+140911</li> <li>LimeSurvey 2.05+140915</li> <li>LimeSurvey 2.05+141003</li> <li>LimeSurvey 2.05+141020</li> <li>LimeSurvey 2.05+141109</li> <li>LimeSurvey 2.05+141110</li> <li>LimeSurvey 2.05+141113</li> <li>LimeSurvey 2.05+141123</li> <li>LimeSurvey 2.05+141126</li> <li>LimeSurvey 2.05+141210</li> <li>LimeSurvey 2.05+141229</li> <li>LimeSurvey 2.05+150211</li> <li>LimeSurvey 2.05+150310</li> <li>LimeSurvey 2.05+150413</li> <li>LimeSurvey 2.05+150508</li> <li>LimeSurvey 2.05+150520</li> <li>LimeSurvey 2.06+150611</li> <li>LimeSurvey 2.06+150612</li> <li>LimeSurvey 2.06+150619</li> <li>LimeSurvey 2.06+150629</li> <li>LimeSurvey 2.06+150723</li> <li>LimeSurvey 2.06+150730</li> <li>LimeSurvey 2.06+150731</li> <li>LimeSurvey 2.06+150824</li> <li>LimeSurvey 2.06+150831</li> <li>LimeSurvey 2.06+151016</li> <li>LimeSurvey 2.06+151018</li> <li>LimeSurvey 2.06+151109</li> <li>LimeSurvey 2.06+151126</li> <li>LimeSurvey 2.06+151205</li> <li>LimeSurvey 2.06+151215</li> <li>LimeSurvey 2.06+160123</li> <li>LimeSurvey 2.06+160129</li> <li>LimeSurvey 2.06+150729</li> <li>LimeSurvey 2.06+150812</li> <li>LimeSurvey 2.06+150825</li> <li>LimeSurvey 2.06+150911</li> <li>LimeSurvey 2.06+150930</li> <li>LimeSurvey 2.06+151014</li> <li>LimeSurvey 2.06+160121</li> <li>LimeSurvey 2.06RC1</li> <li>LimeSurvey 2.06RC2</li> <li>LimeSurvey 2.50.1</li> <li>LimeSurvey 2.50+160202</li> <li>LimeSurvey 2.50+160204</li> <li>LimeSurvey 2.50+160206</li> <li>LimeSurvey 2.50+160210</li> <li>LimeSurvey 2.50+160212</li> <li>LimeSurvey 2.50+160215</li> <li>LimeSurvey 2.50+160216</li> <li>LimeSurvey 2.50+160218</li> <li>LimeSurvey 2.50+160219</li> <li>LimeSurvey 2.50+160222</li> <li>LimeSurvey 2.50+160223</li> <li>LimeSurvey 2.50+160225</li> <li>LimeSurvey 2.50+160228</li> <li>LimeSurvey 2.50+160307</li> <li>LimeSurvey 2.50+160308</li> <li>LimeSurvey 2.50+160311</li> <li>LimeSurvey 2.50+160316</li> <li>LimeSurvey 2.50+160401</li> <li>LimeSurvey 2.50+160404</li> <li>LimeSurvey 2.50+160405</li> <li>LimeSurvey 2.50+160411</li> <li>LimeSurvey 2.50+160413</li> <li>LimeSurvey 2.50+160414</li> <li>LimeSurvey 2.50+160415</li> <li>LimeSurvey 2.50+160418</li> <li>LimeSurvey 2.50+160421</li> <li>LimeSurvey 2.50+160428</li> <li>LimeSurvey 2.50+160430</li> <li>LimeSurvey 2.50+160504</li> <li>LimeSurvey 2.50+160506</li> <li>LimeSurvey 2.50+160512</li> <li>LimeSurvey 2.50+160517</li> <li>LimeSurvey 2.50+160523</li> <li>LimeSurvey 2.50+160526</li> <li>LimeSurvey 2.50+160602</li> <li>LimeSurvey 2.50+160606</li> <li>LimeSurvey 2.50+160613</li> <li>LimeSurvey 2.50+160614</li> <li>LimeSurvey 2.50+160616</li> <li>LimeSurvey 2.50+160620</li> <li>LimeSurvey 2.50+160715</li> <li>LimeSurvey 2.50+160718</li> <li>LimeSurvey 2.50+160726</li> <li>LimeSurvey 2.50+160731</li> <li>LimeSurvey 2.50+160804</li> <li>LimeSurvey 2.50+160816</li> <li>LimeSurvey 2.50+160817</li> <li>LimeSurvey 2.50+160213</li> <li>LimeSurvey 2.50+160217</li> <li>LimeSurvey 2.50+160309</li> <li>LimeSurvey 2.50+160310</li> <li>LimeSurvey 2.50+160314</li> <li>LimeSurvey 2.50+160317</li> <li>LimeSurvey 2.50+160323</li> <li>LimeSurvey 2.50+160330</li> <li>LimeSurvey 2.50+160407</li> <li>LimeSurvey 2.50+160408</li> <li>LimeSurvey 2.50+160412</li> <li>LimeSurvey 2.50+160425</li> <li>LimeSurvey 2.50+160426</li> <li>LimeSurvey 2.50+160503</li> <li>LimeSurvey 2.50+160516</li> <li>LimeSurvey 2.50+160525</li> <li>LimeSurvey 2.50+160529</li> <li>LimeSurvey 2.50+160603</li> <li>LimeSurvey 2.50+160714</li> <li>LimeSurvey 2.50+160725</li> <li>LimeSurvey 2.50+160727</li> <li>LimeSurvey 2.50+160728</li> <li>LimeSurvey 2.50+160810</li> <li>LimeSurvey 2.50+160812</li> <li>LimeSurvey 2.50RC1</li> <li>LimeSurvey 2.50RC2</li> <li>LimeSurvey 2.50RC3</li> <li>LimeSurvey 2.50RC4</li> <li>LimeSurvey 2.50RC5</li> <li>LimeSurvey 2.50RC6</li> <li>LimeSurvey 2.50RC7</li> <li>LimeSurvey 2.50RC8</li> <li>LimeSurvey 2.51.0</li> <li>LimeSurvey 2.51.1</li> <li>LimeSurvey 2.51.2</li> <li>LimeSurvey 2.51.3</li> <li>LimeSurvey 2.51.4</li> <li>LimeSurvey 2.51.4+160908</li> <li>LimeSurvey 2.52+160929</li> <li>LimeSurvey 2.53+161004</li> <li>LimeSurvey 2.54.1+161010</li> <li>LimeSurvey 2.54+161007</li> <li>LimeSurvey 2.54.2+161012</li> <li>LimeSurvey 2.54.3+161014</li> <li>LimeSurvey 2.54.4+161018</li> <li>LimeSurvey 2.54.5+161019</li> <li>LimeSurvey 2.55.1+161026</li> <li>LimeSurvey 2.55+161021</li> <li>LimeSurvey 2.55.2+161103</li> <li>LimeSurvey 2.55.3+161111</li> <li>LimeSurvey 2.56.1+161118</li> <li>LimeSurvey 2.56+161117</li> <li>LimeSurvey 2.57.0+161202</li> <li>LimeSurvey 2.57.1+161205</li> <li>LimeSurvey 2.58.0+170104</li> <li>MODX 2.3.0-pl</li> <li>MODX 2.3.1-pl</li> <li>MODX 2.3.2-pl</li> <li>MODX 2.3.3-pl</li> <li>MODX 2.3.4-pl</li> <li>MODX 2.3.5-pl</li> <li>MODX 2.3.6-pl</li> <li>MODX 2.4.0-pl</li> <li>MODX 2.4.1-pl</li> <li>MODX 2.4.2-pl</li> <li>MODX 2.4.3-pl</li> <li>MODX 2.4.4-pl</li> <li>MODX 2.5.0-pl</li> <li>MODX 2.5.1-pl</li> <li>MODX 2.5.2-pl</li> <li>Booked 2.6</li> <li>phpList 3.0.9</li> <li>phpList 3.0.10</li> <li>phpList 3.0.11</li> <li>phpList 3.0.12</li> <li>phpList 3.2.0</li> <li>phpList 3.2.1</li> <li>phpList 3.2.2</li> <li>phpList 3.2.3</li> <li>phpList 3.2.4</li> <li>phpList 3.2.5</li> <li>phpList 3.2.6</li> <li>XOOPS 2.5.8</li> <li>XOOPS 2.5.8-beta1</li> <li>XOOPS 2.5.8-rc1</li> <li>XOOPS 2.5.8-rc2</li> <li>XOOPS 2.5.8-rc3</li> <li>PHPMailer 5.0.0</li> <li>PHPMailer 5.0.2</li> <li>PHPMailer 5.1</li> <li>PHPMailer 5.1.0</li> <li>PHPMailer 5.2.4</li> <li>PHPMailer 5.2.5</li> <li>PHPMailer 5.2.6</li> <li>PHPMailer 5.2.7</li> <li>PHPMailer 5.2.8</li> <li>PHPMailer 5.2.9</li> <li>PHPMailer 5.2.10</li> <li>PHPMailer 5.2.11</li> <li>PHPMailer 5.2.12</li> <li>PHPMailer 5.2.13</li> <li>PHPMailer 5.2.14</li> <li>PHPMailer 5.2.15</li> <li>PHPMailer 5.2.16</li> <li>PHPMailer 5.2.17</li> <li>PHPMailer 5.2.18</li> <li>PHPMailer 5.2.19</li> </ul> Wed, 28 Dec 2016 17:00:51 GMTPHPMailer1749<p>An independent researcher uncovered a critical vulnerability in PHPMailer that could potentially be used by (unauthenticated) remote attackers to achieve remote arbitrary code execution in the context of the web server user and remotely compromise the target web application. <br> <br>To exploit the vulnerability an attacker could target common website components such as contact/feedback forms, registration forms, password email resets and others that send out emails with the help of a vulnerable version of the PHPMailer class. <br> <br>This patch follows and supersedes the patch for CVE-2016-1033.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Wed, 28 Dec 2016 17:00:51 GMTWordPress1750<p>The activation key for multisite installations is not fully random. The predictable nature of this key weakens its cryptographical properties and allows potential information disclosure.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1755<p>Cross-site request forgery (CSRF) bypass via uploading a Flash file</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1756<p>Inadequate escaping in the theme name fallback leads to a XSS vulnerability which can be abused by attackers to execute malicious code.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1757<p>Cross-site scripting (XSS) via the plugin name or version header on update-core.php</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1753<p>Post via email checks mail.example.com if the default settings aren't changed, which can be abused by attacks to add posts.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1759<p>The accessibility mode of the widget edit page has a simple cross-site request forgery vulnerability due to the lack of a nonce check.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1758<p>The REST API exposes user data for all users who had authored a post of a public post type. The patch limits this to only post types which have specified that they should be shown within the REST API.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.7</li> </ul> Thu, 12 Jan 2017 13:11:58 GMTWordPress1754<p>WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> </ul> Mon, 30 Jan 2017 12:29:37 GMTWordPress1768<p>WordPress's "Press This" contains an exploit that allows users to add taxonomy terms, even if they do not have permissions to do so.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> </ul> Mon, 30 Jan 2017 12:29:37 GMTWordPress1769<p>A cross-site scripting (XSS) vulnerability was discovered in the posts list table which allows hackers to inject malicious code.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> </ul> Mon, 30 Jan 2017 12:29:37 GMTWordPress1770<p>A Cross-Site Request Forgery (CSRF) vulnerability exists on the Press This page of WordPress. This issue can be used to create a Denial of Service (DoS) condition if an authenticated administrator visits a malicious URL.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1814<p>The name of a taxonomy term was left out of cross-site scripting prevention.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1813<p>WordPress versions 4.7.2 and earlier contain a Cross-site scripting (XSS) vulnerability in the media file metadata which can be exploited by hackers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1809<p>Part of security release WordPress 4.7.3.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1811<p>The use of YouTube video URLs allows cross-site scripting.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1812<p>The use of special control characters in a redirect URL can circumvent the URL validation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> </ul> Wed, 08 Mar 2017 16:37:16 GMTWordPress1810<p>Some administrative paths did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID. <br> <br>Part of security release SA-CORE-2017-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> </ul> Thu, 16 Mar 2017 13:41:48 GMTDrupal1914<p>When added a private file via a configured text editor (like CKEditor), the editor would not correctly check access for the file being attached, resulted in an access bypass. <br> <br>Part of security patch SA-CORE-2017-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> </ul> Thu, 16 Mar 2017 13:41:48 GMTDrupal1913<p>This was a critical access bypass vulnerability. A site was only affected by this when the following conditions were met: <br> <br>- The site has the RESTful Web Services (rest) module enabled. <br>- The site allows PATCH requests. <br>- An attacker can get or register a user account on the site. <br> <br>Part of security release SA-CORE-2017-002 </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.3.0</li> </ul> Wed, 19 Apr 2017 19:50:22 GMTDrupal1971<p>Part of WordPress release 4.7.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> </ul> Mon, 24 Apr 2017 09:01:32 GMTWordPress1977<p>Mail sent using the JMail API had leaked the used PHPMailer version in the mail headers. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1986<p>Inadequate filtering leads to XSS in the template manager component. <br> <br>CVE-2017-7984 <br> <br>Part of security release: 3.7.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1985<p>Inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components. <br> <br>CVE-2017-7985 <br> <br>Part of security release: 3.7.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1989<p>Inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component. <br> <br>CVE-2017-7987 <br> <br>Part of security release: 3.7.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1990<p>In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents had allowed overwriting the author of an article. <br> <br>Part of patch Joomla 3.7.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1987<p>Multiple files had caused full path disclosures on systems with enabled error reporting. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> </ul> Tue, 02 May 2017 13:44:30 GMTJoomla1991<p>Inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components. <br> <br>CVE-2017-7986 <br> <br>Part of security release: 3.7.0</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> </ul> Tue, 09 May 2017 07:32:39 GMTJoomla1988<p>Inadequate filtering of request data had led to a SQL Injection vulnerability. <br> <br>Part of release 3.7.1. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> </ul> Thu, 18 May 2017 08:10:17 GMTJoomla2045<p>Part of release 4.7.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2040<p>Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas. <br>Part of Wordpress release 4.7.5. <br> <br>https://github.com/WordPress/WordPress/commit/031cbb0548fcf0212b8f8136fdba0e9d119f7b84</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2041<p>Part of release 4.7.5 <br> <br>https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2044<p>A Cross Site Request Forgery (CRSF) vulnerability was discovered in the filesystem credentials dialog.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2042<p>A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2043<p>Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team. <br>Files: <br>* wp-includes/class-wp-xmlrpc-server.php <br> <br>https://github.com/WordPress/WordPress/commit/0f3180de0203cc6874dafdd713c4b8e8880e2d10 <br> <br>Part of release 4.7.5 <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> </ul> Thu, 18 May 2017 15:36:20 GMTWordPress2053<p>PECL YAML parser did not handle PHP objects safely during certain operations within Drupal core. This could lead to remote code execution. <br> <br>Part of security release SA-CORE-2017-003 <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> </ul> Thu, 22 Jun 2017 10:50:51 GMTDrupal2081<p>Private files that had been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system. <br> <br>The security team has also received reports that this vulnerability is being exploited for spam purposes, similar to the scenario discussed in PSA-2016-003 for the public file system. <br> <br>Part of security release SA-CORE-2017-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> </ul> Thu, 22 Jun 2017 10:50:51 GMTDrupal2082<p>The file REST resource did not properly validate some fields when manipulating files. A site was only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource. <br> <br>Part of security release SA-CORE-2017-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> </ul> Thu, 22 Jun 2017 10:50:51 GMTDrupal2083<p>Improper cache invalidation had led to disclosure of form contents.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> </ul> Wed, 05 Jul 2017 08:55:30 GMTJoomla2096<p>Missing CSRF token checks and improper input validation lead to an XSS vulnerability. <br> <br>CVE-2017-9934 <br> <br>Part of security release: 3.7.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> </ul> Wed, 05 Jul 2017 09:42:37 GMTJoomla2098<p>Inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components. <br> <br>CVE-2017-7985 <br> <br>Part of security release: 3.7.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> </ul> Wed, 05 Jul 2017 09:42:37 GMTJoomla2097<p>The CMS installer application had lacked a process to verify the users ownership of a webspace, potentially allowing users to gain control. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4-rc1</li> </ul> Wed, 26 Jul 2017 12:38:03 GMTJoomla2108<p>Inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components. <br> <br>CVE-2017-11612 <br> <br>Part of security release: 3.7.4 <br> <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.0</li> <li>Joomla 1.5.1</li> <li>Joomla 1.5.2</li> <li>Joomla 1.5.3</li> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4-rc1</li> </ul> Wed, 26 Jul 2017 12:38:03 GMTJoomla2107<p>There was a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affected entities that did not use or did not have UUIDs, and entities that had different access restrictions on different revisions of the same entity. <br> <br>Part of security release SA-CORE-2017-004 <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> </ul> Thu, 17 Aug 2017 10:49:40 GMTDrupal2115<p>When created a view, you could optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpoint to only views configured to use Ajax. This is mitigated if you have access restrictions on the view. <br> <br>It is best practice to always include some form of access restrictions on all views, even if you are using another module to display them. <br> <br>Part of security release SA-CORE-2017-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> </ul> Thu, 17 Aug 2017 10:49:40 GMTDrupal2113<p>When using the REST API, users without the correct permission could post comments via REST that were approved even if the user did not have permission to post approved comments. <br> <br>This issue only affected sites that have the RESTful Web Services (rest) module enabled, the comment entity REST resource enabled, and where an attacker could access a user account on the site with permissions to post comments, or where anonymous users could post comments. <br> <br>Part of security release SA-CORE-2017-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> </ul> Thu, 17 Aug 2017 10:49:40 GMTDrupal2114<p>A cross-site scripting (XSS) vulnerability was discovered in the plugin editor. Reported by 陈瑞琦 (Chen Ruiqi).</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2125<p>An open redirect was discovered on the user and term edit screens.. The button "Back to Users" in the users and term page in the admin admin redirects to the HTTP referrer address without verification. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2118<p>A cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery. Reported by xknown of the WordPress Security Team.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2120<p>A cross-site scripting (XSS) vulnerability was discovered in template names. Reported by Luka (sikic).</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2123<p>A cross-site scripting (XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo Assis (@brutelogic) of Sucuri Security.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2117<p>A logic bug in a SQL query had led to the disclosure of article intro texts when these articles were in the archived state.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0-rc1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTJoomla2127<p>A path traversal vulnerability was discovered in the customizer.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.7.37</li> <li>WordPress 3.7.38</li> <li>WordPress 3.7.39</li> <li>WordPress 3.7.40</li> <li>WordPress 3.7.41</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.8.37</li> <li>WordPress 3.8.38</li> <li>WordPress 3.8.39</li> <li>WordPress 3.8.40</li> <li>WordPress 3.8.41</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 3.9.35</li> <li>WordPress 3.9.36</li> <li>WordPress 3.9.37</li> <li>WordPress 3.9.39</li> <li>WordPress 3.9.40</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.0.34</li> <li>WordPress 4.0.35</li> <li>WordPress 4.0.36</li> <li>WordPress 4.0.37</li> <li>WordPress 4.0.38</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.1.34</li> <li>WordPress 4.1.35</li> <li>WordPress 4.1.36</li> <li>WordPress 4.1.37</li> <li>WordPress 4.1.38</li> <li>WordPress 4.1.39</li> <li>WordPress 4.1.40</li> <li>WordPress 4.1.41</li> <li>WordPress 4.1.42</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.2.31</li> <li>WordPress 4.2.32</li> <li>WordPress 4.2.33</li> <li>WordPress 4.2.34</li> <li>WordPress 4.2.35</li> <li>WordPress 4.2.36</li> <li>WordPress 4.2.37</li> <li>WordPress 4.2.38</li> <li>WordPress 4.2.39</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.27</li> <li>WordPress 4.3.28</li> <li>WordPress 4.3.29</li> <li>WordPress 4.3.30</li> <li>WordPress 4.3.31</li> <li>WordPress 4.3.32</li> <li>WordPress 4.3.33</li> <li>WordPress 4.3.34</li> <li>WordPress 4.3.35</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2122<p>$wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but added hardening to prevent plugins and themes from accidentally causing a vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2119<p>A path traversal vulnerability was discovered in the file unzipping code. Reported by Alex Chapman (noxrnet).</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 06:10:43 GMTWordPress2121<p>Inadequate escaping in the LDAP authentication plugin had resulted into a disclosure of username and password.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.4</li> <li>Joomla 1.5.5</li> <li>Joomla 1.5.6</li> <li>Joomla 1.5.7</li> <li>Joomla 1.5.8</li> <li>Joomla 1.5.9</li> <li>Joomla 1.5.10</li> <li>Joomla 1.5.11</li> <li>Joomla 1.5.12</li> <li>Joomla 1.5.13</li> <li>Joomla 1.5.14</li> <li>Joomla 1.5.15</li> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0-rc1</li> </ul> Fri, 22 Sep 2017 07:53:18 GMTJoomla2126<p>A cross-site scripting (XSS) vulnerability was discovered in the link modal. Wordpress link preview may allow adversaries to display crafted URLs that contain JavaScript code or URLs to sites that can manipulate the origin page through `window.opener` browser DOM property.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> </ul> Fri, 22 Sep 2017 07:53:18 GMTWordPress2124<p>WordPress versions 4.8.2 and earlier are affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> </ul> Wed, 01 Nov 2017 10:17:21 GMTWordPress2203<p>A bug had allowed third parties to bypass a user's 2-factor-authentication method. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2-rc</li> </ul> Thu, 09 Nov 2017 14:45:59 GMTJoomla2210<p>Inadequate escaping in the LDAP authentication plugin had resulted in disclosure of username and password. <br> <br>CVE Number: CVE-2017-14596.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2-rc</li> </ul> Thu, 09 Nov 2017 14:45:59 GMTJoomla2207<p>A logic bug in com_fields had exposed read-only information about a site's custom fields to unauthorized users. <br> <br>CVE Number: CVE-2017-16633.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2-rc</li> </ul> Thu, 09 Nov 2017 14:45:59 GMTJoomla2209<p>Missing input validation allowed users to upload JavaScript files, even when they did not have the unfiltered_html capability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.9</li> </ul> Thu, 30 Nov 2017 10:49:30 GMTWordPress2217<p>Added escaping to language attributes in the general template. <br> <br>https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.9</li> </ul> Thu, 30 Nov 2017 10:49:30 GMTWordPress2215<p>The new blog user hash that is generated is a determinate substring, allowing an attacker to calculate the hash.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.9</li> </ul> Thu, 30 Nov 2017 10:49:30 GMTWordPress2216<p>Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. <br> <br>https://core.trac.wordpress.org/changeset/42260</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.0</li> <li>WordPress 3.0.1</li> <li>WordPress 3.0.2</li> <li>WordPress 3.0.3</li> <li>WordPress 3.0.4</li> <li>WordPress 3.0.5</li> <li>WordPress 3.0.6</li> <li>WordPress 3.1</li> <li>WordPress 3.1.1</li> <li>WordPress 3.1.2</li> <li>WordPress 3.1.3</li> <li>WordPress 3.1.4</li> <li>WordPress 3.2</li> <li>WordPress 3.2.1</li> <li>WordPress 3.3</li> <li>WordPress 3.3.1</li> <li>WordPress 3.3.2</li> <li>WordPress 3.3.3</li> <li>WordPress 3.4</li> <li>WordPress 3.4.1</li> <li>WordPress 3.4.2</li> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.9</li> </ul> Thu, 30 Nov 2017 10:49:30 GMTWordPress2214<p>Improper check for authorized URL leads to customer information leak (order information, order IDs, customer name). Leaked information simplifies attack on guest Order Review, which exposes customer email, shipping and billing address. In some areas, the same underlying issue can lead to privilege escalation for Admin accounts. <br> <br>Part of patch SUPEE-6285</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.4.0.0</li> <li>Magento 1.4.0.1</li> <li>Magento 1.4.1.0</li> <li>Magento 1.4.1.1</li> <li>Magento 1.4.2.0</li> <li>Magento 1.5.0.1</li> <li>Magento 1.5.1.0</li> <li>Magento 1.6.0.0</li> <li>Magento 1.6.1.0</li> <li>Magento 1.6.2.0</li> <li>Magento 1.7.0.0</li> <li>Magento 1.7.0.1</li> <li>Magento 1.7.0.2</li> <li>Magento 1.8.0.0</li> <li>Magento 1.8.1.0</li> <li>Magento 1.9.0.0</li> <li>Magento 1.9.0.1</li> <li>Magento 1.9.1.0</li> <li>Magento 1.9.1.1</li> </ul> Mon, 11 Dec 2017 19:10:48 GMTMagento1787<p>2 Identified potential exploits were discovered that could: <br> <br>1. Enable an attacker to execute arbitrary code on a Magento server. <br>2. Create files with a .csv extension, create writable directories, and change the permission of existing files to world-writable (777). <br> <br>Creating files with a .csv extension could lead to executing files like php.csv (only under certain circumstances). The ability to run code with a .csv extension is dangerous itself and could be combined with other attacks; for example, targeting other software installed on the server.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.4.0.0</li> <li>Magento 1.4.0.1</li> <li>Magento 1.4.1.0</li> <li>Magento 1.4.1.1</li> <li>Magento 1.4.2.0</li> <li>Magento 1.5.0.1</li> <li>Magento 1.5.1.0</li> <li>Magento 1.6.0.0</li> <li>Magento 1.6.1.0</li> <li>Magento 1.6.2.0</li> <li>Magento 1.7.0.0</li> <li>Magento 1.7.0.1</li> <li>Magento 1.7.0.2</li> <li>Magento 1.8.0.0</li> <li>Magento 1.8.1.0</li> <li>Magento 1.9.0.0</li> <li>Magento 1.9.0.1</li> </ul> Mon, 11 Dec 2017 19:10:48 GMTMagento2106<p>A user can append comments to an order using a specially crafted request that relies upon the PayFlow Pro payment module. Magento did not filter the request properly, which potentially resulted in JavaScript code being saved in database (see issue APPSEC-1240) and then executed server-side when the administrator tried to view the order. This attack could lead to a takeover of the administrator session or executing actions on behalf of administrator. Part of patch SUPEE-7405</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.4.0.0</li> <li>Magento 1.4.0.1</li> <li>Magento 1.4.1.0</li> <li>Magento 1.4.1.1</li> <li>Magento 1.4.2.0</li> <li>Magento 1.5.0.1</li> <li>Magento 1.5.1.0</li> <li>Magento 1.6.0.0</li> <li>Magento 1.6.1.0</li> <li>Magento 1.6.2.0</li> <li>Magento 1.7.0.0</li> <li>Magento 1.7.0.1</li> <li>Magento 1.7.0.2</li> <li>Magento 1.8.0.0</li> <li>Magento 1.8.1.0</li> <li>Magento 1.9.0.0</li> <li>Magento 1.9.0.1</li> <li>Magento 1.9.1.0</li> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> </ul> Fri, 29 Dec 2017 09:41:01 GMTMagento2246<p>Lack of escaping in the module chromes leads to XSS vulnerabilities in the module system. <br> <br>CVE-2018-6380 <br> <br>Part of security release: 3.8.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.5.16</li> <li>Joomla 1.5.17</li> <li>Joomla 1.5.18</li> <li>Joomla 1.5.19</li> <li>Joomla 1.5.20</li> <li>Joomla 1.5.21</li> <li>Joomla 1.5.22</li> <li>Joomla 1.5.23</li> <li>Joomla 1.5.24</li> <li>Joomla 1.5.25</li> <li>Joomla 1.5.26</li> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> </ul> Tue, 30 Jan 2018 15:43:44 GMTJoomla2272<p>Inadequate input filtering in the Uri class (formerly JUri) had led to a XSS vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 1.6.0</li> <li>Joomla 1.6.1</li> <li>Joomla 1.6.2</li> <li>Joomla 1.6.3</li> <li>Joomla 1.6.4</li> <li>Joomla 1.6.5</li> <li>Joomla 1.6.6</li> <li>Joomla 1.7.0</li> <li>Joomla 1.7.1</li> <li>Joomla 1.7.2</li> <li>Joomla 1.7.3</li> <li>Joomla 1.7.4</li> <li>Joomla 1.7.5</li> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> </ul> Tue, 30 Jan 2018 15:43:44 GMTJoomla2274<p>The lack of type casting of a variable in SQL statement had led to a SQL injection vulnerability in the Hathor postinstall message.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> </ul> Tue, 30 Jan 2018 15:43:44 GMTJoomla2275<p>Inadequate input filtering in com_fields leads to a XSS vulnerability in multiple field types, i.e. list, radio and checkbox. <br> <br>CVE-2018-6377 <br> <br>Part of security release: 3.8.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> </ul> Tue, 30 Jan 2018 15:43:44 GMTJoomla2273<p>Versions 3.2.3 and earlier are affected by an issue where cached queries within shortcodes could lead to object injection. This is related to the recent WordPress 4.8.3 security release. This issue can only be exploited by users who can edit content and add shortcodes.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2259<p>Versions 3.2.1 and earlier are affected by an issue where shortcodes and relative URLs for product downloads are not handled or escaped correctly by the CSV importer, which could potentially result in code injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2266<p>Version 3.2.1 and earlier did not properly sanitize nonce keys, post descriptions, and other items, potentially leading to XSS vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 1.6.0</li> <li>WooCommerce 1.6.1</li> <li>WooCommerce 1.6.2</li> <li>WooCommerce 1.6.3</li> <li>WooCommerce 1.6.4</li> <li>WooCommerce 1.6.5</li> <li>WooCommerce 1.6.5.1</li> <li>WooCommerce 1.6.5.2</li> <li>WooCommerce 1.6.6</li> <li>WooCommerce 2.0.0</li> <li>WooCommerce 2.0.0-RC1</li> <li>WooCommerce 2.0.0-RC2</li> <li>WooCommerce 2.0.0-RC3</li> <li>WooCommerce 2.0.1</li> <li>WooCommerce 2.0.2</li> <li>WooCommerce 2.0.3</li> <li>WooCommerce 2.0.4</li> <li>WooCommerce 2.0.5</li> <li>WooCommerce 2.0.6</li> <li>WooCommerce 2.0.7</li> <li>WooCommerce 2.0.8</li> <li>WooCommerce 2.0.9</li> <li>WooCommerce 2.0.10</li> <li>WooCommerce 2.0.11</li> <li>WooCommerce 2.0.12</li> <li>WooCommerce 2.0.13</li> <li>WooCommerce 2.0.14</li> <li>WooCommerce 2.0.15</li> <li>WooCommerce 2.0.16</li> <li>WooCommerce 2.0.17</li> <li>WooCommerce 2.0.18</li> <li>WooCommerce 2.0.19</li> <li>WooCommerce 2.0.20</li> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2265<p>Products with title variations did not have the titles sanitized when populated with default values, which could potentially result in a stored XSS vulnerability. Although the fix was ostensibly to help compatibility with newer versions of WordPress, it also addresses a potential security flaw. Fixed in WooCommerce 3.2.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2264<p>Adds escape html filters to the error messages coming from post validation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2267<p>Sanitizes the names (keys) of the field data while displaying the admin reports.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2268<p>Admin URL is escaped using escape URL raw.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.1</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2271<p>WooCommerce version prior to 3.2.4 failed to unslash geolocation hashes and redirect URLs, and failed to properly escape an admin URL</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> </ul> Wed, 14 Feb 2018 10:08:47 GMTWooCommerce2270<p>Prior to version 3.3.1 of WooCommerce, the callback referenced in the fatal error message for transaction emails was not properly escaped, potentially leading to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> </ul> Thu, 15 Feb 2018 13:08:19 GMTWooCommerce2279<p>In WooCommerce versions earlier than 3.3.1, it was possible to input negative or non-integer values as the product page in the query string.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.2</li> </ul> Thu, 15 Feb 2018 13:08:19 GMTWooCommerce2280<p>In WooCommerce version prior to 3.3.1, there were no constraints to prevent negative or non-integer image sizes from being processed as-is, which could result in unpredictable behavior, buffer overflows, or even command injection. This fix uses absint to ensure that all image sizes are positive integers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.2</li> </ul> Thu, 15 Feb 2018 13:08:19 GMTWooCommerce2278<p>Drupal core had an external link injection vulnerability when the language switcher block was used. A similar vulnerability existed in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site. <br> <br>Part of security release SA-CORE-2018-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2299<p>Drupal has a Drupal.checkPlain() JavaScript function which is used to escape potentially dangerous text before outputting it to HTML. This function does not correctly handle all methods of injecting malicious HTML, leading to a cross-site scripting vulnerability under certain circumstances. <br> <br>The PHP functions which Drupal provides for HTML escaping are not affected.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2296<p>When using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fails under certain conditions in which one module was trying to grant access to the file and another is trying to deny it, leading to an access bypass vulnerability. <br> <br>This vulnerability is mitigated by the fact that it only occurs for unusual site configurations. <br> <br>Part of security release SA-CORE-2018-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2297<p>Users with permission to post comments were able to view content and comments they do not have access to, and are also able to add comments to this content. <br> <br>This vulnerability is mitigated by the fact that the comment system must be enabled and the attacker must have permission to post comments. <br> <br>Part of security release SA-CORE-2018-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2295<p>When using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node. This could result in an access bypass vulnerability. <br> <br>This issue is mitigated by the fact that it only applies to sites that a) use the Content Translation module; and b) use a node access module such as Domain Access which implement hook_node_access_records(). <br> <br>Part of security release SA-CORE-2018-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2298<p>The Settings Tray module had a vulnerability that allowed users to update certain data that they did not have the permissions for. <br> <br>If you had implemented a Settings Tray form in contrib or a custom module, the correct access checks should be added. This release fixes the only two implementations in core, but did not harden against other such bypasses. <br> <br>This vulnerability could be mitigated by disabling the Settings Tray module. <br> <br>Part of security release SA-CORE-2018-001</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2294<p>A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or custom modules in order to exploit.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> </ul> Fri, 23 Feb 2018 08:42:38 GMTDrupal2300<p>The lack of type casting of a variable in SQL statement had led to a SQL injection vulnerability in the user notes list view.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6-rc1</li> </ul> Wed, 14 Mar 2018 10:09:35 GMTJoomla2338<p>An attacker with the ability to launch a Man-in-the-middle attack on a network connection could inject code on the Magento Admin RSS feed. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.4.0.0</li> <li>Magento 1.4.0.1</li> <li>Magento 1.4.1.0</li> <li>Magento 1.4.1.1</li> <li>Magento 1.4.2.0</li> <li>Magento 1.5.0.1</li> <li>Magento 1.5.1.0</li> <li>Magento 1.6.0.0</li> <li>Magento 1.6.1.0</li> <li>Magento 1.6.2.0</li> <li>Magento 1.7.0.0</li> <li>Magento 1.7.0.1</li> <li>Magento 1.7.0.2</li> <li>Magento 1.8.0.0</li> <li>Magento 1.8.1.0</li> <li>Magento 1.9.0.0</li> <li>Magento 1.9.0.1</li> <li>Magento 1.9.1.0</li> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2251<p>An administrator could inject code in sales order records, which could result in an XSS attack on anyone that viewed the page. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2252<p>An attacker could target non-Apache installations (for example, Nginx) to upload executable scripts that could be used to stage additional exploitations. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2253<p>An attacker could use a low privilege RSS session cookie to escalate privileges and gain access to the Magento Admin Portal. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2249<p>A Magento administrator with limited privileges could exploit a vulnerability in the customer group to create a URL that could be used as part of CSRF attack. <br> <br>Part of patch SUPEE-10266 <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2250<p>A Magento administrator could perform malicious actions through an inadequate security check of the form key in the customer segment page. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2257<p>Several fields in the Admin panel did not correctly handle autocomplete, which could result in a potential information leak when a browser tries to autocomplete the field. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2254<p>Magento did not properly validate session cookies, or caused them to expire, which potentially permits visitors to use expired cookies to interact with a store. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2255<p>A Magento administrator with limited privileges could exploit a vulnerability in the newsletter template to create a URL that could be used as part of a CSRF attack. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2256<p>An administrator with limited privileges could force Magento store notifications to include internal system files. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> </ul> Mon, 26 Mar 2018 08:35:35 GMTMagento2263<p>Official description: BO : Bug #PSCFV-11936, Escape HTML char for Return Message</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.5.5.0</li> <li>PrestaShop 1.5.6.0</li> <li>PrestaShop 1.5.6.1</li> <li>PrestaShop 1.5.6.2</li> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2056<p>Official description: SECURITY : (cc49345) Fixes PSCSX-4841 Usage of ECB mode</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.5.4.0</li> <li>PrestaShop 1.5.4.1</li> <li>PrestaShop 1.5.5.0</li> <li>PrestaShop 1.5.6.0</li> <li>PrestaShop 1.5.6.1</li> <li>PrestaShop 1.5.6.2</li> <li>PrestaShop 1.5.6.3</li> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2067<p>Official description: FO: bug#PSCSX-9597, When customers sign up, they receive their password in plain text in the confirmation email, but these must be hidden.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2289<p>Official description: FO:bug#PSCSX-9032, secure token from js injection by htmlentities</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2291<p>Official description: FO: bug#PSCSX-9132, I adopt the solution in this link( http://www.nfriedly.com/techblog/2009/11/how-to-build-a-spam-free-contact-forms-without-captchas/ ) to solve the problem of spamming the contact form</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2290<p>Official description: BO : Fixed checking if module is trusted PSCSX-6883</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.1</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2329<p>Official description: CORE : force secure option on the cookies if SSL is forced #PSCFV-12409</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.5.5.0</li> <li>PrestaShop 1.5.6.0</li> <li>PrestaShop 1.5.6.1</li> <li>PrestaShop 1.5.6.2</li> <li>PrestaShop 1.5.6.3</li> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2328<p>Official description: SMARTY : Add new cleanHtml modifier</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.5.6.1</li> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> </ul> Wed, 28 Mar 2018 09:36:23 GMTPrestaShop2327<p>A remote code execution vulnerability existed within multiple subsystems of Drupal 7.x and 8.x. This potentially allowed attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. <br> <br>Part of security release SA-CORE-2018-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.5.0</li> </ul> Thu, 29 Mar 2018 08:41:18 GMTDrupal2354<p>A remote code execution vulnerability existed within multiple subsystems of Drupal 7.x and 8.x. This potentially allowed attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. <br> <br>Part of security release SA-CORE-2018-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> </ul> Tue, 03 Apr 2018 09:31:36 GMTDrupal2353<p>Escape HTML returned from `get_the_generator()`. <br> <br>WordPress 4.9.5 Security and Maintenance Release</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> </ul> Thu, 05 Apr 2018 07:42:54 GMTWordPress2373<p>Switch to `wp_safe_redirect()` when redirecting the login page when SSL is forced. <br> <br>WordPress 4.9.5 Security and Maintenance Release</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> </ul> Thu, 05 Apr 2018 07:42:54 GMTWordPress2372<p>Disallow localhost in `wp_http_validate_url()`. <br> <br>WordPress 4.9.5 Security and Maintenance Release</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> </ul> Thu, 05 Apr 2018 07:42:54 GMTWordPress2371<p>Official description: #7069 Protect translations display against XSS injections / #7190 Escape translated strings to prevent XSS</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> </ul> Mon, 09 Apr 2018 13:27:26 GMTPrestaShop2066<p>Official description: CO: improvement, We often receive issues regarding translation, and the concerned translations always have a call to sprintf(). The new function trans() is already able to replace the placeholders without throwing fatal errors in case of errors. So this PR removes all calls to sprintf where trans can be used alone.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> </ul> Mon, 09 Apr 2018 13:27:26 GMTPrestaShop2330<p>CKEditor, a third-party JavaScript library included in Drupal core, has fixed a cross-site scripting (XSS) vulnerability. The vulnerability stemmed from the fact that it was possible to execute XSS inside CKEditor when using the image2 plugin (which Drupal 8 core also uses). <br> <br>Part of security release SA-CORE-2018-003</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> </ul> Tue, 24 Apr 2018 08:20:36 GMTDrupal2377<p>A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allowed attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. <br> <br>Part of security release SA-CORE-2018-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> </ul> Thu, 26 Apr 2018 11:03:44 GMTDrupal2378<p>Sanitization of various functions in order to prevent XSS. <br> <br>Official description: Remove kses from before/after attribute.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Tue, 08 May 2018 11:59:12 GMTWooCommerce2352<p>A Magento administrator could inject executable scripts in non-executable areas, such as the page title. <br> <br>Part of patch Magento 2.0.16 and 2.1.9 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 08 May 2018 11:59:12 GMTMagento2401<p>Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in a XSS vulnerability. <br> <br>CVE-2018-11328 <br> <br>Part of security release: 3.8.8</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2424<p>Inadequate filtering had allowed users authorized to create custom fields to manipulate the filtering options and inject an unvalidated option.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2426<p>Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver. <br> <br>CVE Number: CVE-2018-11322 <br> <br>Part of security release: 3.8.8</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2428<p>Inadequate checks had allowed users to modify the access levels of user groups with higher permissions.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2427<p>Inadequate checks had allowed users to see the names of tags that were either unpublished or published with restricted view permission.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2429<p>Inadequate input filtering leads to multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack. <br> <br>CVE-2018-11326 <br> <br>Part of security release: 3.8.8</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2430<p>A long running background process, such as remote checks for core or extension updates, had created a race condition where a session which was expected to be destroyed would be recreated.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 24 May 2018 13:17:56 GMTJoomla2432<p>Inadequate filtering of file and folder names lead to various XSS attack vectors in the media manager. <br> <br>CVE-2018-6378 <br> <br>Part of security release: 3.8.8</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> </ul> Mon, 28 May 2018 11:06:25 GMTJoomla2425<p>A user could gain file system write access using path traversal on the static.php file. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Thu, 31 May 2018 09:18:09 GMTMagento2439<p>Official Description: Tweak where meta gets sanitized before passing to comparison function. <br>Escaping for includes/classes. WooCommerce 3.3.0 Introduces fixes for XSS flaws, including those covered in this patch.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 04 Jun 2018 09:23:23 GMTWooCommerce2351<p>A site visitor could create an account where one of the parameters could have created a server denial-of-service. Part of SUPEE-10415.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Wed, 20 Jun 2018 13:06:42 GMTMagento2399<p>An administrator with limited privileges could insert script in the product name field, potentially resulting in a stored cross-site scripting that affects other administrators. Part of SUPEE-10415.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Wed, 20 Jun 2018 13:06:42 GMTMagento2406<p>An administrator with limited privileges could insert injectable code in promo fields, creating an opportunity for arbitrary remote code execution. Part of SUPEE-10415.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Wed, 20 Jun 2018 13:06:42 GMTMagento2408<p>In some cases the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page url. <br> <br>CVE Number: CVE-2018-12711 <br> <br>Part of security release: 3.8.9</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9-rc</li> </ul> Thu, 28 Jun 2018 12:16:37 GMTJoomla2497<p>Escape the random image module output to prevent XSS and fix an issue preventing the random image module from functioning in previous versions <br> <br>Part of security release: 3.8.9</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 28 Jun 2018 12:16:37 GMTJoomla2512<p>An ACL check had been added when editing content in the profile form to prevent users with insufficient permissions from making unauthorized changes to profiles.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 28 Jun 2018 12:16:37 GMTJoomla2513<p>Inadequate escaping leads to XSS vulnerability in com_media. <br> <br>CVE-2014-6631 <br> <br>Part of security release: 3.2.5 and 3.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> </ul> Thu, 05 Jul 2018 08:17:35 GMTJoomla2496<p>Official description: Use new method for dynamically resolving Input based on request method</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9-rc</li> <li>Akeeba Backup 4.5.0</li> <li>Akeeba Backup 4.5.1</li> </ul> Thu, 05 Jul 2018 08:17:35 GMTJoomla2533<p>Official description: Posts, Post Types: Clear post password cookie when logging out.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2543<p>Official description: Comments: Escape permalink values on edit screen to prevent XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.4.26</li> <li>WordPress 4.4.27</li> <li>WordPress 4.4.28</li> <li>WordPress 4.4.29</li> <li>WordPress 4.4.30</li> <li>WordPress 4.4.31</li> <li>WordPress 4.4.32</li> <li>WordPress 4.4.33</li> <li>WordPress 4.4.34</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.5.25</li> <li>WordPress 4.5.26</li> <li>WordPress 4.5.27</li> <li>WordPress 4.5.28</li> <li>WordPress 4.5.29</li> <li>WordPress 4.5.30</li> <li>WordPress 4.5.31</li> <li>WordPress 4.5.32</li> <li>WordPress 4.5.33</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.6.22</li> <li>WordPress 4.6.23</li> <li>WordPress 4.6.24</li> <li>WordPress 4.6.25</li> <li>WordPress 4.6.26</li> <li>WordPress 4.6.27</li> <li>WordPress 4.6.28</li> <li>WordPress 4.6.29</li> <li>WordPress 4.6.30</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.7.22</li> <li>WordPress 4.7.23</li> <li>WordPress 4.7.24</li> <li>WordPress 4.7.25</li> <li>WordPress 4.7.26</li> <li>WordPress 4.7.27</li> <li>WordPress 4.7.28</li> <li>WordPress 4.7.29</li> <li>WordPress 4.7.30</li> <li>WordPress 4.7.31</li> <li>WordPress 4.7.32</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.18</li> <li>WordPress 4.8.19</li> <li>WordPress 4.8.20</li> <li>WordPress 4.8.21</li> <li>WordPress 4.8.22</li> <li>WordPress 4.8.23</li> <li>WordPress 4.8.24</li> <li>WordPress 4.8.25</li> <li>WordPress 4.8.26</li> <li>WordPress 4.8.27</li> <li>WordPress 4.8.28</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2540<p>Official description: Harden the random aspect of the hash used for user profile and admin email address changes.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2541<p>Official description: <br> <br>Privacy: Correct the error check when creating an export folder in `wp_privacy_generate_personal_data_export_file()`. <br>Privacy: Make sure `wp_add_privacy_policy_content()` does not cause a fatal error by unintentionally flushing rewrite rules outside of the admin context. <br>Privacy: Only link to menus panel in Customizer if selected privacy page can be accessed there. <br> <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2545<p>Not supported objects could be inserted into the "term queries" cache causing potential code injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.7.22</li> <li>WordPress 4.7.23</li> <li>WordPress 4.7.24</li> <li>WordPress 4.7.25</li> <li>WordPress 4.7.26</li> <li>WordPress 4.7.27</li> <li>WordPress 4.7.28</li> <li>WordPress 4.7.29</li> <li>WordPress 4.7.30</li> <li>WordPress 4.7.31</li> <li>WordPress 4.7.32</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.18</li> <li>WordPress 4.8.19</li> <li>WordPress 4.8.20</li> <li>WordPress 4.8.21</li> <li>WordPress 4.8.22</li> <li>WordPress 4.8.23</li> <li>WordPress 4.8.24</li> <li>WordPress 4.8.25</li> <li>WordPress 4.8.26</li> <li>WordPress 4.8.27</li> <li>WordPress 4.8.28</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2544<p>Official description: a file deletion issue where a user with the capability to edit and delete media files could potentially manipulate media metadata to attempt to delete files outside the uploads directory.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2539<p>Official description: Use the correct escaping function when outputting the meta box context.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> </ul> Tue, 10 Jul 2018 12:01:07 GMTWordPress2542<p>Data escaped and validated. Plus translator comment documentation added. <br> <br>Official description: Admin metaboxes views translation escaping fix.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 12 Jul 2018 07:35:16 GMTWooCommerce2277<p>Official description: PHPCS fixes for cart.php template</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 12 Jul 2018 07:35:16 GMTWooCommerce2345<p>Sanitization of widget components.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 12 Jul 2018 07:35:16 GMTWooCommerce2344<p>Official description: Grouped products; allow custom columns and changes to values. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 12 Jul 2018 07:35:16 GMTWooCommerce2350<p>Official description: Check admin referer instead of nonce, just like webhooks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTWooCommerce2465<p>Official description: PHPCS passing for abstract-wc-widget.php.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTWooCommerce2464<p>Official description: tip alignment</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTWooCommerce2471<p>Official description: Allow for multiple stock updates at once.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTWooCommerce2476<p>Official description: Fixed includes/class-wc-comments.php PHPCS violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTWooCommerce2480<p>An administrator with limited privileges could insert injectable XML into the layout table, which could create an opportunity for remote code execution. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 16 Jul 2018 07:18:45 GMTMagento2504<p>Official description: Product backorder stock status.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 18 Jul 2018 07:59:43 GMTWooCommerce2474<p>Official description: PHPCS fixes for includes/admin/plugin-updates directory</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 18 Jul 2018 07:59:43 GMTWooCommerce2468<p>Official description: Fix PHPCS violations in includes/admin/reports/class-wc-report-customers.php.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 18 Jul 2018 07:59:43 GMTWooCommerce2469<p>Official description: Fixed post classes PHPCS violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 18 Jul 2018 07:59:43 GMTWooCommerce2482<p>An administrator with limited privileges could insert script in the downloadable product link title field, which could subsequently lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Thu, 19 Jul 2018 06:59:52 GMTMagento2420<p>Official description: Allow modal to be wider and fix button wrapping. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2-rc.1</li> </ul> Thu, 19 Jul 2018 06:59:52 GMTWooCommerce2450<p>Official description: sanitize_text_field does not preserve line breaks. wp_kses_post.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> </ul> Thu, 19 Jul 2018 06:59:52 GMTWooCommerce2453<p>A user could inject a cross-site request forgery (CSRF) into a users cart on the Checkout page due to a missing CSRF token. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Thu, 19 Jul 2018 06:59:52 GMTMagento2530<p>By manipulating request data when saving a category, a user could insert a malicious string into the database that could be used in a subsequent request to perform SQL injection. This injected code could be used to trigger arbitrary (with the proviso they fit in the 255 char field) insert and update commands. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Thu, 19 Jul 2018 06:59:52 GMTMagento2520<p>An administrator with limited privileges could insert script in the custom variables name field, which could potentially result in stored cross-site scripting that affected other administrators. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2441<p>Official Description: Add search label when searching via product crud helper.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTWooCommerce2452<p>Official description: Set more defaults to reduce query count.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTWooCommerce2470<p>An administrator with Import permissions could import an XML file that could potentially provide an opportunity for Remote Code Execution (RCE). <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2501<p>An administrator with limited privileges could embed cross-site scripting elements in the Newsletter template, which could potentially lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2502<p>An administrator with limited privileges could insert arbitrary code into product fields, which could potentially lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2503<p>Weak protection checking could potentially lead to privilege escalation or information disclosure. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2507<p>An administrator with limited privileges could inject a malformed configuration bypass, which could potentially lead to a file redirection that could be leveraged for arbitrary remote code execution. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2511<p>Users could use WYSIWYG directives to include valid remote images that have embedded malicious code that persists through image recreation. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2524<p>The `Enterprise_Logging` extension logs request data when save events are triggered on the website. This information is displayed to administrators with limited privileges that can view the audit log. Although these saved values are escaped before output, the keys were not, which made it possible to insert cross-site scripting (XSS) on this page. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Mon, 23 Jul 2018 13:38:34 GMTMagento2523<p>Official description: GDPR - Personal data export and removal.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Tue, 24 Jul 2018 09:54:02 GMTWooCommerce2483<p>Official description: Fixed payment main classes PHPCS violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Tue, 24 Jul 2018 09:54:02 GMTWooCommerce2481<p>Official description: PHPCS fixes for includes/emails directory.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Tue, 24 Jul 2018 09:54:02 GMTWooCommerce2484<p>Official description: Use correct escaping on placeholder.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> </ul> Wed, 25 Jul 2018 07:07:09 GMTWooCommerce2473<p>Official description: GitHub: PHPCS fixes for includes/gateways directory #19341</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Thu, 26 Jul 2018 10:52:48 GMTWooCommerce2485<p>Data escaped and validated. Plus translator comment documentation added. <br> <br>Official description: Admin metaboxes views translation escaping fix.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 30 Jul 2018 09:12:53 GMTWooCommerce2269<p>Official description: Manually fix coding standard violations that can't be fixed with phpcbf.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 30 Jul 2018 09:12:53 GMTWooCommerce2472<p>Official description: PHPCS fixes for global/form-login.php.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Tue, 31 Jul 2018 07:12:11 GMTWooCommerce2335<p>Official description: Add filter to sanitize woocommerce_attribute_label.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> </ul> Tue, 31 Jul 2018 07:12:11 GMTWooCommerce2518<p>Official description: Switch to variable.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 01 Aug 2018 08:42:12 GMTWooCommerce2488<p>Official description: Update action placement so all product types are consistent.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 01 Aug 2018 08:42:12 GMTWooCommerce2489<p>Official description: Fix escaping.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 06 Aug 2018 07:17:00 GMTWooCommerce2323<p>Official description: PHPCS fixes for class-wc-report-sales-by-category.php.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 06 Aug 2018 07:17:00 GMTWooCommerce2341<p>Scripts in product SKUs were evaluated and executed when a user views the Bundle Items tab for a bundled product. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Mon, 06 Aug 2018 07:17:00 GMTMagento2527<p>An administrator with limited privileges could insert script in the RMA SKU field, which could potentially result in a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Tue, 07 Aug 2018 08:11:58 GMTMagento2456<p>An administrator could be tricked into performing a system backup by an attacker who had crafted a targeted Cross-Site Request forgery (CSRF) attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 08 Aug 2018 08:20:33 GMTMagento2445<p>An administrator with limited privileges could inject a malformed configuration bypass leading to a file redirection that could be leveraged in to arbitrary remote code execution. <br> <br>Part of patch SUPEE-10415</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Thu, 09 Aug 2018 08:40:19 GMTMagento2409<p>A user could insert information in a return path, thereby storing information on the file system that could lead to Remote Code Execution (RCE). <br> <br>Part of patch SUPEE-9652</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.3.7</li> </ul> Mon, 13 Aug 2018 07:55:12 GMTMagento2514<p>Admin users with permission to manage products could use custom layout XML to copy any file to any location. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Mon, 13 Aug 2018 07:55:12 GMTMagento2519<p>An administrator user coudl inject a malicious script into the file option type when creating a new product with a configurable option of type file. This script would then be executed when a user clicks Configure next to the product when creating an order. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Mon, 13 Aug 2018 07:55:12 GMTMagento2526<p>Active sessions persist after a password change. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Mon, 13 Aug 2018 07:55:12 GMTMagento2559<p>An administrator with limited privileges could insert script into the CMS hierarchy, which could potentially result in a stored cross-site scripting that affects other administrators. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Tue, 14 Aug 2018 06:44:05 GMTMagento2449<p>An administrator with limited privileges could insert script in the attribute group name field, which could potentially result in stored cross-site scripting that affects other administrators. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 15 Aug 2018 10:10:16 GMTMagento2421<p>An administrator with limited privileges could insert script into the private sales events and invitations fields, which could subsequently lead to a stored cross-site scripting attack. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 22 Aug 2018 06:49:42 GMTMagento2419<p>Official description: Correct errors per PHPCS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 23 Aug 2018 06:51:44 GMTWooCommerce2321<p>Official description: Properly sanitize and format "dp".</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 23 Aug 2018 06:51:44 GMTWooCommerce2343<p>An administrator with limited privileges could insert script into the shipment tracking, which could potentially result in stored cross-site scripting that affects other administrators. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Thu, 23 Aug 2018 06:51:44 GMTMagento2423<p>Inadequate checks in the InputFilter class could allow specifically prepared PHAR files to pass the upload filter. <br> <br>CVE Number: CVE-2018-15882 <br> <br>Part of security release: 3.8.12</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> </ul> Fri, 31 Aug 2018 10:50:18 GMTJoomla2615<p>Inadequate output filtering on the user profile page could lead to a stored XSS attack. <br> <br>CVE Number: CVE-2018-15880 <br> <br>Part of security release: 3.8.12</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> </ul> Fri, 31 Aug 2018 10:50:18 GMTJoomla2616<p>Inadequate checks regarding disabled fields can lead to an ACL violation. <br> <br>CVE Number: CVE-2018-15881 <br> <br>Part of security release: 3.8.12</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> </ul> Fri, 31 Aug 2018 10:50:18 GMTJoomla2617<p>A Magento administrator with limited privileges could use the delete files module to upload and delete arbitrary files. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Thu, 13 Sep 2018 06:58:54 GMTMagento2417<p>A Magento administrator could inject scriptable code into customer fields, which could result in an XSS attack. <br> <br>Part of patch 2.0.16, 2.1.9</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Thu, 13 Sep 2018 06:58:54 GMTMagento2492<p>An administrator with limited privileges could embed cross-site scripting elements in the website name/store view name setting, which could potentially lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Thu, 13 Sep 2018 06:58:54 GMTMagento2505<p>An administrator with limited privileges could craft a cross-site request to perform requests on behalf of another administrator. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> </ul> Thu, 13 Sep 2018 06:58:54 GMTMagento2558<p>Official description: Additional escaping for order templates.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Tue, 18 Sep 2018 11:59:33 GMTWooCommerce2332<p>In reports, improved XSS filtering and confirm navigation if nonce has expired. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Tue, 18 Sep 2018 11:59:33 GMTWooCommerce2342<p>An administrator with limited privileges could create a store website that could accept and run arbitrary remote code execution. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> </ul> Tue, 18 Sep 2018 11:59:33 GMTMagento2600<p>An administrator with limited privileges could inject malicious code that could cause sensitive files to be deleted. He could then launch a second stage payload that would lead to arbitrary remote code execution. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> </ul> Tue, 18 Sep 2018 11:59:33 GMTMagento2604<p>Official description: Fixed coding standards for WC_Admin_Settings. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 20 Sep 2018 06:53:56 GMTWooCommerce2337<p>A user could insert script in the RMA SKU field, which could potentially result in a stored cross-site scripting attack. <br> <br>Part of patch: 2.0.18, 2.1.12, 2.2.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Thu, 20 Sep 2018 06:53:56 GMTMagento2422<p>An administrator with limited privileges was able to delete critical system control files to subsequently gain privilege escalation through the import history section. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> </ul> Mon, 24 Sep 2018 07:03:57 GMTMagento2605<p>An administrator with limited privileges could insert script in the downloadable product link title field, which could subsequently lead to a stored cross-site scripting attack. <br> <br>Part of patch Magento 2.0.18, 2.1.12, 2.2.3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Tue, 25 Sep 2018 13:41:59 GMTMagento2571<p>Official description: Improved cookie encryption.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> </ul> Tue, 25 Sep 2018 13:41:59 GMTPrestaShop2610<p>An administrator with limited privileges could have inserted a widget block containing malicious code, creating an opportunity for arbitrary remote code execution. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> </ul> Wed, 26 Sep 2018 07:48:32 GMTMagento2213<p>Official description: Auth screen escaping.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 27 Sep 2018 06:49:54 GMTWooCommerce2324<p>Official description: Reduced permission levels for theme edition</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> </ul> Thu, 27 Sep 2018 06:49:54 GMTPrestaShop2612<p>Sanitizes posted attributes when JS is off. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 01 Oct 2018 07:37:22 GMTWooCommerce2340<p>An administrator with limited privileges could create a page within the Content Management System (CMS) with an embedded cross-site scripting attack. <br> <br>Part of patch SUPEE-10415</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Mon, 01 Oct 2018 07:37:22 GMTMagento2407<p>An administrator with limited privileges could create billing agreements with embedded cross-site scripting elements that could subsequently lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10415</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> </ul> Mon, 01 Oct 2018 07:37:22 GMTMagento2418<p>Magento did not previously terminate existing sessions when the currently logged-in user changed his or her password. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Mon, 01 Oct 2018 07:37:22 GMTMagento2440<p>Official description: When custom attributes are created, they are decoded. Make the values match correctly. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 08 Oct 2018 06:46:06 GMTWooCommerce2333<p>Official description: PHPCS fixes for html-csv-import-mapping.php. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Mon, 08 Oct 2018 06:46:06 GMTWooCommerce2339<p>An administrator with limited privileges could insert injectable code in product attributes, potentially leading to arbitrary remote code execution. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> </ul> Mon, 08 Oct 2018 06:46:06 GMTMagento2596<p>Official description: A wrongly verified parameter allowed redirection to an external URL. <br> <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> </ul> Mon, 08 Oct 2018 06:46:06 GMTPrestaShop2614<p>Official description: PHPCS fixes for html-admin-page-shipping-classes.php.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Tue, 09 Oct 2018 07:49:13 GMTWooCommerce2336<p>Official description: PHPCS fixes for template form-pay.php <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Thu, 11 Oct 2018 06:10:57 GMTWooCommerce2331<p>This had addressed an issue affecting a small number of customers to enable two prior patches to handle SOAP v1 interactions in WSDL. <br> <br>Part of patch: 1.9.3.7, 1.14.3.7, SUPEE-10415</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> </ul> Thu, 11 Oct 2018 06:10:57 GMTMagento2639<p>In case that an attacker got access to the mail account of an user who could approve admin verifications in the registration process he could activate himself. <br> <br>CVE-2018-17855 <br> <br>Part of security release: 3.8.13</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> </ul> Thu, 11 Oct 2018 14:51:35 GMTJoomla2431<p>Added additional CSRF hardening in com_installer actions in the backend. <br> <br>CVE-2018-17858 <br> <br>Part of security release: 3.8.13</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> </ul> Thu, 11 Oct 2018 14:51:35 GMTJoomla2648<p>Inadequate checks in com_contact could allowed mail submission in disabled forms. <br> <br>CVE-2018-17859 <br> <br>Part of security release: 3.8.13</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> </ul> Thu, 11 Oct 2018 14:51:35 GMTJoomla2647<p>Inadequate checks on the tags search fields could lead to an access level violation. <br> <br>CVE-2018-17857 <br> <br>Part of security release: 3.8.13</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> </ul> Thu, 11 Oct 2018 14:51:35 GMTJoomla2645<p>Joomla’s com_joomlaupdate allowed the execution of arbitrary code. The default ACL config enabled access of administrator-level users to access com_joomlaupdate and trigger a code execution. <br> <br>CVE-2018-17856 <br> <br>Part of security release: 3.8.13</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> </ul> Thu, 11 Oct 2018 14:51:35 GMTJoomla2646<p>Official description: GitHub: phpcs</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 15 Oct 2018 07:46:38 GMTWooCommerce2490<p>Officiële description: Add names to nonces in template files.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 15 Oct 2018 07:46:38 GMTWooCommerce2487<p>This fix removes the incorrect esc_url() call and replaces it with wc_clean() instead. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> </ul> Mon, 15 Oct 2018 07:46:38 GMTWooCommerce2535<p>A Magento administrator with limited privileges could insert malicious code in email templates. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Wed, 17 Oct 2018 06:17:22 GMTMagento2460<p>Official description: Flat rate: remove currency symbols.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 17 Oct 2018 06:17:22 GMTWooCommerce2491<p>An anonymous user could visit an internal URL and see the status of a Magento upgrade. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Wed, 17 Oct 2018 06:17:22 GMTMagento2654<p>Drupal core and contributed modules frequently use a "destination" query string parameter in URLs to redirect users to a new destination after completing an action on the current page. <br> <br>Under certain circumstances, malicious users can use this parameter to construct a URL that will trick users into being redirected to a 3rd party website, thereby exposing the users to potential social engineering attacks. <br> <br>Part of security release SA-CORE-2018-006</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> </ul> Mon, 22 Oct 2018 07:27:24 GMTDrupal2674<p>In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass. <br> <br>In order to fix this issue, the following changes have been made to content moderation which may have implications for backwards compatibility: <br> <br>ModerationStateConstraintValidator <br>Two additional services have been injected into this service. Anyone subclassing this service must ensure these additional dependencies are passed to the constructor, if the constructor has been overridden. <br> <br>StateTransitionValidationInterface <br>An additional method has been added to this interface. Implementations of this interface which do not extend the StateTransitionValidation should implement this method. <br> <br>Implementations which do extend from the StateTransitionValidation should ensure any behavioural changes they have made are also reflected in this new method. <br> <br>User permissions <br>Previously users who didn't have access to use any content moderation transitions were granted implicit access to update content provided the state of the content did not change. Now access to an associated transition will be validated for all users in scenarios where the state of content does not change between revisions.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> </ul> Mon, 22 Oct 2018 07:27:24 GMTDrupal2671<p>The Contextual Links module didn't sufficiently validate the requested contextual links. <br> <br>This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access contextual links". <br> <br>Part of Security release SA-CORE-2018-006.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> </ul> Mon, 22 Oct 2018 07:27:24 GMTDrupal2675<p>In certain circumstances the user could enter a particular path that triggered an open redirect to a malicious URL. <br> <br>While this issue was mitigated by the fact that the user needed the administer paths permission to exploit, <br>the path module has been patched to prevent malicious usage. <br> <br>Part of security release SA-CORE-2018-006</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> </ul> Mon, 22 Oct 2018 07:27:24 GMTDrupal2672<p>When sending email some variables were not being sanitized for shell arguments, which could lead to remote code execution. <br> <br>Part of security release SA-CORE-2018-006</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> </ul> Mon, 22 Oct 2018 07:27:24 GMTDrupal2673<p>The account lockout mechanism could leak the Magento site's contact e-mail. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Wed, 24 Oct 2018 08:09:06 GMTMagento2593<p>An attacker could craft a URL request on a Magento site during checkout and retrieve information about past orders. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> </ul> Wed, 24 Oct 2018 08:09:06 GMTMagento2664<p>Combined patch, because the changes are the same. <br> <br>[APPSEC-1495] Any user can interact with the sales order function despite not being authorized <br> <br>[APPSEC-1510] Any admin user can upload favicon Icon <br> <br>[APPSEC-1535] Access control lists not validated when using quick edit mode in tables <br> <br>Part of patch 2.0.16, 2.1.9</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> </ul> Mon, 29 Oct 2018 08:05:21 GMTMagento2459<p>Customer and admin tokens did not expire correctly, which allowed for the potential re-use of a cookie by an attacker. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> </ul> Mon, 29 Oct 2018 08:05:21 GMTMagento2495<p>Official description: Only allow image MIME type upload via REST APIs.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> </ul> Tue, 30 Oct 2018 08:58:01 GMTWooCommerce2159<p>If an anonymous attacker was given generic order information, he could generate a cookie collision and obtain order information. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 30 Oct 2018 08:58:01 GMTMagento2400<p>Official description: Check query var for orderby.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> </ul> Tue, 30 Oct 2018 08:58:01 GMTWooCommerce2458<p>Official description: Fixed includes/class-wc-auth.php PHPCS violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Tue, 30 Oct 2018 08:58:01 GMTWooCommerce2478<p>Redirect url was not safely escaped.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> </ul> Tue, 30 Oct 2018 08:58:01 GMTWooCommerce2689<p>Official description: Fixed includes/shortcode PHPCS violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 31 Oct 2018 08:50:50 GMTWooCommerce2486<p>Both titles are now properly escaped and protected against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> </ul> Wed, 31 Oct 2018 08:50:50 GMTWooCommerce2691<p>A Magento administrator could inject code in the integration activation. <br> <br>Part of security patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Thu, 01 Nov 2018 09:07:49 GMTMagento2402<p>Better escaping on product quick edit. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> </ul> Thu, 01 Nov 2018 09:07:49 GMTWooCommerce2690<p>Improvements to wc_create_attributes (DRI). </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> </ul> Thu, 01 Nov 2018 09:07:49 GMTWooCommerce2693<p>The anti-CSRF form_key was not changed after a user logs in. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Fri, 02 Nov 2018 10:52:18 GMTMagento2376<p>A Magento administrator with limited privileges could use the sitemap generation tool to arbitrarily overwrite sensitive files. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Fri, 02 Nov 2018 10:52:18 GMTMagento2695<p>A Magento administrator with limited privileges could add new SVG images that contain injected code. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 05 Nov 2018 08:02:59 GMTMagento2403<p>A Magento administrator with limited privileges could exploit a vulnerability in the theme creation function to arbitrarily disclose and delete system files of a Magento installation. <br> <br>Part of patch MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Mon, 05 Nov 2018 08:02:59 GMTMagento2404<p>Adding proper escaping for admin refund part to avoid XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> </ul> Mon, 05 Nov 2018 08:02:59 GMTWooCommerce2698<p>Temporary upload directories were not randomly named, and could potentially be guessed by an attacker. This enhancement introduced randomly named directories to the temporary upload file path, making it significantly more difficult to guess the temporary path.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9-beta</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72564<p>It was possible for a user to bypass CAPTCHA validation under certain circumstances while submitting form data. This was unintentional, and the bypass has been fixed.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72563<p>Certain sections of the codebase utilized the esc_url_raw() function where the esc_url() function should have been used instead. Potentially leading to unsanitized output. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72566<p>It was possible for certain key-value pairs found in URL queries to not be properly encoded. The introduction of the 'wpcf7_build_query()' function in this patch ensured that all key-value pairs would be properly URL encoded.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.3.1</li> <li>Contact Form 7 3.3.2</li> <li>Contact Form 7 3.3.3</li> <li>Contact Form 7 3.4</li> <li>Contact Form 7 3.4.1</li> <li>Contact Form 7 3.4.2</li> <li>Contact Form 7 3.5</li> <li>Contact Form 7 3.5.1</li> <li>Contact Form 7 3.5.2</li> <li>Contact Form 7 3.5.3</li> <li>Contact Form 7 3.5.4</li> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72565<p>A new feature was introduced that allowed data submitted through a form to be sanitized as a whole. This consolidates and simplifies the process of data input sanitization as part of the data submission process.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72568<p>A new feature was introduced that allows for tag types to be properly sanitized.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.5.1</li> <li>Contact Form 7 3.5.2</li> <li>Contact Form 7 3.5.3</li> <li>Contact Form 7 3.5.4</li> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72569<p>If the Flamingo Plugin was installed alongside Contact Form 7 in order to save submitted forms to the database, then Flamingo would still save the data even when a submission was flagged as spam. With this change, spammy data is no longer saved to the database.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9-beta</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72575<p>The CAPTCHA system made use of the internal PHP random function mt_rand() when determining which CAPTCHA to phrases to present. With this new improvement, the CAPTCHA system instead makes use of the WordPress-specific wp_rand() function, which utilizes different randomization algorithms, making the CAPTCHA system much harder to predict.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1-beta</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72578<p>Since the wp_mail() function doesn't clear the $phpmailer->AltBody attribute and uses the same $phpmailer object repetitively, it is necessary to clear any data that may have been stored in the attribute from previous wp_mail() calls.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72608<p>Due to the way some IIS-based servers check permissions on files and directories, it was possible for some uploaded files to not be removed properly under certain circumstances. This patch altered the way Contact Form 7 deletes uploaded files to account for those specific IIS-based configurations. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72606<p>The title attribute of contact forms were not being thoroughly sanitized. Additional filtering measures have been implemented in this patch.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72607<p>In the messages tab in a contact form editor screen, messages could be created that Contact Form 7 displays in different situations. Allowing HTML in a message can be a security risk, and as such, only plain text is allowed. This patch forcibly strips all HTML tags and entities from these messages.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72609<p>Avoid using create_function(). The create_function() has a security risk like eval() does, and PHP 7.2 will warn you if the function is used.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.5.3</li> <li>Contact Form 7 3.5.4</li> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72638<p>Inside the Admin Panel, an internal URL was not being properly escaped. This patch uses the esc_url() function to properly escape the URL.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72657<p>A privilege escalation vulnerability had been closed by explicitly specifying the 'capability_type' argument in the register_post_type() function call.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> </ul> Mon, 05 Nov 2018 13:17:17 GMTContact Form 72655<p>Sanitize error title admin section to prevent XSS</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> </ul> Tue, 06 Nov 2018 08:00:30 GMTWooCommerce2699<p>Sanitize $handle in the admin log page to prevent XSS, and a check if the log file which is about to be deleted also really exists in the log directory. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> </ul> Tue, 06 Nov 2018 08:00:30 GMTWooCommerce2704<p>Official description: PHPCS fixes for includes/admin/importers directory. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Wed, 07 Nov 2018 13:02:42 GMTWooCommerce2467<p>Prior to this patch, it was possible to attach a local file to a contact form upload under certain circumstances, even if the file was outside of the /wp-content/ directory. This patch updates the upload capabilities so it no longer possible to attach a local file that is outside of the /wp-content/ directory.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> </ul> Wed, 07 Nov 2018 13:02:42 GMTContact Form 72658<p>Via the Woocommerce API, it is permitted for the shopmanager to solely adjust the data of customers.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Thu, 08 Nov 2018 14:53:47 GMTWooCommerce2720<p>A Magento administrator with limited privileges could introduce malicious code when creating a new CMS Page, which could result in arbitrary remote code execution. <br> <br>Part of patch SUPEE-10266</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTMagento2260<p>A Magento administrator with limited privileges could insert executable code in the order view through the order code label.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTMagento2494<p>CSV Import function at administrator page extended with extra file type checking.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTWooCommerce2701<p>There's now a check to see if the current user has the permission to assign an API key. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTWooCommerce2725<p>Magento had not correctly set concurrent sessions to expire. A customer could log out under the mistaken assumption that their sessions had expired, but later, an attacker could access the account through one of the unexpired sessions. <br> <br>Part of patch: MAGENTO 2.0.16 AND 2.1.9 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTMagento2721<p>Topics such as login credentials and the path to the product CSV import file are blacklisted as callbacks. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Tue, 20 Nov 2018 14:11:18 GMTWooCommerce2722<p>An administrator with limited privileges could insert a file in the file system using the WYSIWYG image upload process. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2447<p>An administrator with limited privileges can delete critical system control files to subsequently gain privilege escalation through the Import History feature. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2446<p>Password changes initiated from the admin panel did not force a logout. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2529<p>A user with access to an admin account that includes ACL permissions to save the shipping methods section of the configuration table could insert cross-site scripting into the database that was subsequently output on every section of the `System > Configuration` table. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2536<p>An administrator with limited privileges could insert injectable code in promo fields, creating an opportunity for arbitrary remote code execution. <br> <br>Part of patch MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2738<p>An administrator with limited privileges could embed cross-site scripting elements in the newsletter template, which could potentially lead to a stored cross-site scripting attack. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 21 Nov 2018 08:58:05 GMTMagento2730<p>A vulnerability was found that had permitted the IP spoofing of a client’s address, which allowed the potential bypassing of any security features that rely on identifying a client by their IP source. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Thu, 22 Nov 2018 11:55:14 GMTMagento2531<p>A user could insert script in their address field, which could potentially introduce a denial-of -service vulnerability. External reference: Fortiguard FG-VD-17-116. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2443<p>A user could insert a script in storefront field that could lead to arbitrary JavaScript code execution in the context of the administrator panel. <br> <br>Part of patch: 2.2.3, 2.1.12, 2.0.18</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2451<p>A Magento administrator with limited privileges could add new products that could contain a malicious script in the product's thumbnail. <br> <br>Part of patch 2.0.16, 2.1.9</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2493<p>The cron.php file could leak database credentials if it is not able to establish a connection to the database. <br> <br>Part of Patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2522<p>An administrator user with access to edit products could insert a malicious script into downloadable products. The malicious script could be triggered on the front-end and admin area. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2528<p>Multiple CSRF vulnerabilities allowed for deleting websites, stores or store views. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTMagento2521<p>Introduces wpcf7_is_file_path_in_content_dir() to support the use of the UPLOADS constant.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> <li>Contact Form 7 5.0.4</li> </ul> Tue, 27 Nov 2018 08:40:09 GMTContact Form 72744<p>An administrator with limited privileges could embed cross-site scripting elements in product attributes, which could potentially lead to a cross-site scripting attack. <br> <br>Part of patch MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 28 Nov 2018 11:27:18 GMTMagento2448<p>Arbitrary JavaScript could be triggered on the sales order page by manipulating one of the URL parameters. <br> <br>Part of patch SUPEE-10752</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> </ul> Thu, 06 Dec 2018 08:50:11 GMTMagento2525<p>Text at Oauth start had not been properly escaped. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Thu, 06 Dec 2018 08:50:11 GMTWooCommerce2766<p>The user rights for the shop manager is changed, it allows the shop manager to change only the customer details in the user management page.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> </ul> Thu, 06 Dec 2018 08:50:11 GMTWooCommerce2768<p>When updating product attributes the old taxonomy slug was not properly escaped. And it's now only unserializing data if data was serialized.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> </ul> Mon, 10 Dec 2018 10:22:35 GMTWooCommerce2769<p>Authors could create posts of unauthorized post types with specially crafted input. <br> <br>Part of security release 5.0.1</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 5.0</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> </ul> Thu, 20 Dec 2018 09:18:52 GMTWordPress2780<p>Authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting vulnerability. <br> <br>Part of security release 5.0.1</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 5.0</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> </ul> Thu, 20 Dec 2018 09:18:52 GMTWordPress2785<p>Contributors could craft meta data in a way that could result in PHP object injection. <br> <br>Part of security release 5.0.1</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 5.0</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> </ul> Thu, 20 Dec 2018 09:18:52 GMTWordPress2781<p>The user activation screen could be indexed by search engines in some uncommon configurations which could lead to exposure of email addresses, and in some rare cases, default generated passwords. <br> <br>Part of security release 5.0.1</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 5.0</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> </ul> Thu, 20 Dec 2018 09:18:52 GMTWordPress2784<p>Check for user role permissions before allow to edit or remove the REST API keys.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Thu, 03 Jan 2019 07:43:13 GMTWooCommerce2771<p>Fix security breaches in TinyMCE filemanager plugin. Remove filemanager action image_size. Check mime type when uploading files. Fixed arbitrary image write/overwrite in Windows installation. Prevent image directory deletion.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PHPFusion 8.00.19</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTPrestaShop2760<p>Post content of the API products were not well sanitised and could result in an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTWooCommerce2827<p>Inadequate escaping in com_contact leads to a stored XSS vulnerability. <br> <br><CVE-2019-6261> <br> <br>Part of security release 3.9.2</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTJoomla2833<p>Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS. <br> <br><CVE-2019-6262> <br> <br>Part of security release 3.9.2</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTJoomla2831<p>Inadequate checks at the Global Configuration Text Filter settings allowed a stored XSS. <br> <br><CVE-2019-6263> <br> <br>Part of security release 3.9.2 <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTJoomla2834<p>Inadequate escaping in mod_banners could lead to a stored XSS vulnerability. <br> <br><CVE-2019-6264> <br> <br>Part of security release 3.9.2</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> </ul> Wed, 16 Jan 2019 09:24:34 GMTJoomla2832<p>A remote code execution vulnerability existed in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. <br> <br>Some Drupal code (core, contrib, and custom) could be performing file operations on insufficiently validated user input, thereby being exposed to this vulnerability. <br> <br>This vulnerability is mitigated by the fact that such code paths typically require access to an administrative permission or an atypical configuration. <br> <br>Part of security release SA-CORE-2019-002</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> </ul> Fri, 18 Jan 2019 09:45:07 GMTDrupal2839<p>An administrator with limited privileges could craft a cross-site request to perform requests on behalf of another administrator. <br> <br>Part of security update MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 30 Jan 2019 11:40:50 GMTMagento2758<p>An administrator with limited privileges could have had inserted script into the detailed rating, which could potentially result in stored cross-site scripting that affects other administrators. <br> <br>Part of security update MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 30 Jan 2019 11:40:50 GMTMagento2750<p>Weak protection checking could potentially lead to privilege escalation or information disclosure. <br> <br>Part of update MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 30 Jan 2019 11:40:50 GMTMagento2756<p>An administrator with limited privileges could insert arbitrary code into product fields, which could potentially lead to a stored cross-site scripting attack. <br> <br>Part of patch SUPEE-10570</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Wed, 30 Jan 2019 11:40:50 GMTMagento2753<p>An administrator with limited privileges could read arbitrary files from the file system. <br> <br>Part of security update MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Mon, 04 Feb 2019 09:11:53 GMTMagento2444<p>A user could craft a URL that forces another user to open the Print Order view. <br> <br>Part of security update MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Mon, 04 Feb 2019 09:11:53 GMTMagento2754<p>An administrator with system configuration privileges had covertly added JavaScript to the Magento store front. <br> <br>Part of security release MAGENTO 2.2.3, 2.1.12 AND 2.0.18 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> </ul> Mon, 04 Feb 2019 09:11:53 GMTMagento2752<p>Magento customer password recoverable from the database `sales_flat_quote` table. A malicious user could use a brute-force attack to recover the `global/secret/key` from the `app/etc/local.xml` file, upload a file, and then decrypt it. <br> <br>Part of patch SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Tue, 12 Feb 2019 09:58:52 GMTMagento2874<p>Unescaped view of the API settings key could result in an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> </ul> Tue, 12 Feb 2019 09:58:52 GMTWooCommerce2872<p>Downloader now will only use HTTPS connections. <br> <br>Part of patch SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Tue, 12 Feb 2019 09:58:52 GMTMagento2875<p>A Moxieplayer redirect allowed an open redirect to any site in an exploitable manner. <br> <br>Part of patch SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Tue, 12 Feb 2019 09:58:52 GMTMagento2876<p>Stored XSS vulnerability through the API which could be exploited by users with write-access API keys.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> </ul> Wed, 13 Feb 2019 08:33:26 GMTWooCommerce2873<p>The import and export were not properly sanitized. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> </ul> Wed, 13 Feb 2019 08:33:26 GMTWooCommerce2877<p>Inadequate filtering on URL fields in various core components could lead to an XSS vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> </ul> Fri, 15 Feb 2019 09:45:51 GMTJoomla2887<p>Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> </ul> Fri, 15 Feb 2019 09:45:51 GMTJoomla2888<p>"No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior but might be unexpected for the user. An additional message is now shown in the configuration dialog.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> </ul> Fri, 15 Feb 2019 09:45:51 GMTJoomla2885<p>Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS. <br> <br><CVE-2019-6262> <br> <br>Part of security release 3.9.2</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> </ul> Fri, 15 Feb 2019 09:45:51 GMTJoomla2904<p>Email Address was not properly escaped.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.0.0</li> <li>WooCommerce 2.0.0-RC1</li> <li>WooCommerce 2.0.0-RC2</li> <li>WooCommerce 2.0.0-RC3</li> <li>WooCommerce 2.0.1</li> <li>WooCommerce 2.0.2</li> <li>WooCommerce 2.0.3</li> <li>WooCommerce 2.0.4</li> <li>WooCommerce 2.0.5</li> <li>WooCommerce 2.0.6</li> <li>WooCommerce 2.0.7</li> <li>WooCommerce 2.0.8</li> <li>WooCommerce 2.0.9</li> <li>WooCommerce 2.0.10</li> <li>WooCommerce 2.0.11</li> <li>WooCommerce 2.0.12</li> <li>WooCommerce 2.0.13</li> <li>WooCommerce 2.0.14</li> <li>WooCommerce 2.0.15</li> <li>WooCommerce 2.0.16</li> <li>WooCommerce 2.0.17</li> <li>WooCommerce 2.0.18</li> <li>WooCommerce 2.0.19</li> <li>WooCommerce 2.0.20</li> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> </ul> Fri, 22 Feb 2019 09:41:07 GMTWooCommerce2879<p>Some field types did not properly sanitize data from non-form sources. This could lead to arbitrary PHP code execution in some cases.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> </ul> Fri, 22 Feb 2019 20:17:36 GMTDrupal2915<p>Some field types did not properly sanitize data from non-form sources. This could lead to arbitrary PHP code execution in some cases. <br> <br>Author's note: The vulnerability for "drupal/core/modules/hal/src/Normalizer/FieldItemNormalizer.php" might also be detected for versions higher than 8.6.9. This occurs because Drupal developers shipped a security fix in a separate file, but Patchman is only able to modify files (to Patch them), not create new ones on your system. As a result, our only option was to back-port the fix into an existing application file. Regrettably, the file which hosts the solution may also exist in later Drupal versions not affected by the vulnerability. If your application runs on Drupal 8.6.10 or above, and you see this detection, it does not necessarily imply a vulnerability, but neither will a subsequent Patch have any negative impact.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> </ul> Sat, 23 Feb 2019 14:10:02 GMTDrupal2916<p>Timing attack could happen while comparing two strings.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> </ul> Fri, 01 Mar 2019 14:11:18 GMTWooCommerce2880<p>With a maliciously crafted comment, a WordPress post was vulnerable to cross-site scripting.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> </ul> Thu, 14 Mar 2019 13:24:37 GMTWordPress2948<p>The JSON handler in com_config lacked input validation, leading to XSS vulnerability. <br> <br>CVE-2019-9712</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> </ul> Fri, 15 Mar 2019 15:22:14 GMTJoomla2957<p>The item_title layout in edit views lacked escaping, leading to a XSS vulnerability. <br> <br>CVE-2019-9711</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> </ul> Fri, 15 Mar 2019 15:22:14 GMTJoomla2956<p>The media form field lacked escaping, this could lead to a XSS vulnerability. <br> <br>CVE-2019-9714</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> </ul> Fri, 15 Mar 2019 15:22:14 GMTJoomla2949<p>The sample data plugins lacked ACL checks, and could allow unauthorized access. <br> <br>CVE-2019-9713</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> </ul> Fri, 15 Mar 2019 15:22:14 GMTJoomla2955<p>An administrator user could delete arbitrary files from the server by sending modified data to the WYSIWYG admin component.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> </ul> Mon, 18 Mar 2019 10:08:30 GMTMagento2945<p>A authenticated API user could perform a SQL Injection by exploiting several API endpoints. <br> <br>Part of security release MAGENTO 2.2.5 AND 2.1.14 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> </ul> Thu, 21 Mar 2019 08:45:34 GMTMagento2944<p>Importing products were not properly sanitized that could expose to code execution. <br> <br>Part of security release MAGENTO 2.2.5 AND 2.1.14 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> </ul> Thu, 21 Mar 2019 08:45:34 GMTMagento2946<p>Under certain circumstances the File module/subsystem allowed a malicious user to upload a file that could trigger a cross-site scripting (XSS) vulnerability. <br> <br>Part of security release SA-CORE-2019-004</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 6.0</li> <li>Drupal 6.1</li> <li>Drupal 6.2</li> <li>Drupal 6.3</li> <li>Drupal 6.4</li> <li>Drupal 6.5</li> <li>Drupal 6.6</li> <li>Drupal 6.7</li> <li>Drupal 6.8</li> <li>Drupal 6.9</li> <li>Drupal 6.10</li> <li>Drupal 6.11</li> <li>Drupal 6.12</li> <li>Drupal 6.13</li> <li>Drupal 6.14</li> <li>Drupal 6.15</li> <li>Drupal 6.16</li> <li>Drupal 6.17</li> <li>Drupal 6.18</li> <li>Drupal 6.19</li> <li>Drupal 6.20</li> <li>Drupal 6.21</li> <li>Drupal 6.22</li> <li>Drupal 6.23</li> <li>Drupal 6.24</li> <li>Drupal 6.25</li> <li>Drupal 6.26</li> <li>Drupal 6.27</li> <li>Drupal 6.28</li> <li>Drupal 6.29</li> <li>Drupal 6.30</li> <li>Drupal 6.31</li> <li>Drupal 6.32</li> <li>Drupal 6.33</li> <li>Drupal 6.34</li> <li>Drupal 6.35</li> <li>Drupal 6.36</li> <li>Drupal 6.37</li> <li>Drupal 6.38</li> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> </ul> Fri, 22 Mar 2019 16:24:52 GMTDrupal2971<p>An unauthenticated user could execute arbitrary code through an SQL injection vulnerability, which caused sensitive data leakage. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Fri, 29 Mar 2019 15:41:29 GMTMagento3002<p>The `Enterprise_Logging` extension logs requested data when save events were triggered on the website. This information was displayed to administrators with limited privileges that could view the audit log. Although these saved values were escaped before output, the keys were not, which made it possible to insert cross-site scripting (XSS) on this page. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Mon, 01 Apr 2019 09:40:03 GMTMagento2975<p>An attacker with limited admin privileges could create a new product (or update an existing product) to allow upload of PHP script via custom option, order that product (through the admin panel the total could be adjusted to $0.00) and uploaded an arbitrary PHP script as a custom option and then executed the PHP script via the browser to achieve RCE (again, in e.g. an nginx environment). <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Mon, 01 Apr 2019 09:40:03 GMTMagento2990<p>Cross site request forgery vulnerability that could change the status of orders. The attack was possible if an admin had the Add Secret Key to URLs disabled. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Mon, 01 Apr 2019 09:40:03 GMTMagento2976<p>APPSEC-1502: Stored XSS - Add new group in Attribute set name <br>APPSEC-1802: Customer registration through frontend did not have anti-CSRF protection <br>APPSEC-1773: Injection on Page leading to DoS <br>APPSEC-1853: CSRF + Stored Cross Site Scripting in newsletter template <br> <br>Part of patch Magento 2.0.16 and 2.1.9 Security Update <br> <br>Note: <br>It can be the case that you will receive a message that the files are patched for the 2 below shown files for versions "2.1.12, 2.1.11, 2.1.10, 2.1.9". As stated in this message the security fix is coming from 2.1.9. What we had to do is move code from a newly introduced file to "AbstractBlock.php". This is code wise the most logical place. It it turns out that the hashes of version range 2.1.12-2.1.5 is the same for "AbstractBlock.php". Therefor we automatically have to patch the entire range. This is currently due to the limitations of our system. <br> <br>vendor/magento/framework/View/Element/AbstractBlock.php <br>vendor/magento/framework/Escaper.php</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> </ul> Mon, 01 Apr 2019 09:40:03 GMTMagento2991<p>Multiple CSRF attack had occurred in the website, web stores and also in the view deletion options. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Mon, 01 Apr 2019 09:40:03 GMTMagento2992<p>Allowed a deletion of single or all store customers. When a POST request that performed the deletion of customers was switched to GET, the lack of form_key parameter that served as a CSRF token was completely ignored, allowing the request to be used in Cross-Site Request Forgery attacks. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Tue, 02 Apr 2019 07:59:46 GMTMagento2966<p>The "refresh list of helpsites" endpoint of com_users lacked access checks, and allowed calls from unauthenticated users. <br> <br>CVE-2019-10946</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> </ul> Wed, 10 Apr 2019 14:51:13 GMTJoomla3019<p>wc_clean Sanitizes arrays recursively. And escaping for translated strings were added. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.0.0</li> <li>WooCommerce 2.0.0-RC2</li> <li>WooCommerce 2.0.0-RC3</li> <li>WooCommerce 2.0.1</li> <li>WooCommerce 2.0.2</li> <li>WooCommerce 2.0.3</li> <li>WooCommerce 2.0.4</li> <li>WooCommerce 2.0.5</li> <li>WooCommerce 2.0.6</li> <li>WooCommerce 2.0.7</li> <li>WooCommerce 2.0.8</li> <li>WooCommerce 2.0.9</li> <li>WooCommerce 2.0.10</li> <li>WooCommerce 2.0.11</li> <li>WooCommerce 2.0.12</li> <li>WooCommerce 2.0.13</li> <li>WooCommerce 2.0.14</li> <li>WooCommerce 2.0.15</li> <li>WooCommerce 2.0.16</li> <li>WooCommerce 2.0.17</li> <li>WooCommerce 2.0.18</li> <li>WooCommerce 2.0.19</li> <li>WooCommerce 2.0.20</li> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> </ul> Mon, 15 Apr 2019 09:18:47 GMTWooCommerce2994<p>The blocks in the sales_order_print.xml layout in the Magento_Sales module had never been set to private or non-cacheable. Therefore, if the full-page cache had enabled, and a signed-in user visits the print order page. Any other signed in user could visit that url and see their detailed order information. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Wed, 17 Apr 2019 08:49:17 GMTMagento3010<p>Allows a deletion of single or all store products. When a POST request that performs the deletion of products was switched to GET, the lack of form_key parameter that serves as a CSRF token was completely ignored, allowing the request to be used in Cross-Site Request Forgery attacks+ <br> <br>Part of Magento 2.1.15, 2.2.6</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Wed, 17 Apr 2019 08:49:17 GMTMagento3012<p>Data escaped and validated. <br> <br>Official description: Admin metaboxes views translation escaping fix.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> </ul> Wed, 17 Apr 2019 08:49:17 GMTWooCommerce3014<p>An administrator with limited permissions was able to obtain information outside of his permissions. <br> <br>Part of update SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Wed, 24 Apr 2019 07:38:59 GMTMagento3031<p>Administrator with limited permissions was able to use XSS attack on another administrator. <br> <br>Part of update SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Wed, 24 Apr 2019 07:38:59 GMTMagento3032<p>Official description: GitHub: Fixed PHPCS violations</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 29 Apr 2019 08:45:16 GMTWooCommerce2466<p>In specific configurations, it had been possible to overwrite reviews. <br> <br>Part of update SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Mon, 29 Apr 2019 08:45:16 GMTMagento3033<p>Administrator with limited permissions was able to use XSS attack on another administrator. <br> <br>Part of update SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Tue, 30 Apr 2019 07:45:31 GMTMagento3035<p>Arbitrary JS could be triggered on the sales order grid page by manipulating one of the URL parameters. <br> <br>Part of patch SUPEE-10888</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> </ul> Wed, 01 May 2019 08:42:19 GMTMagento3040<p>The Yoast notification message type was not properly escaped against XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 1.5.3</li> <li>Yoast SEO 1.5.3.1</li> <li>Yoast SEO 1.5.3.2</li> <li>Yoast SEO 1.5.3.3</li> <li>Yoast SEO 1.5.4</li> <li>Yoast SEO 1.5.4.1</li> <li>Yoast SEO 1.5.4.2</li> <li>Yoast SEO 1.5.5</li> <li>Yoast SEO 1.5.5.1</li> <li>Yoast SEO 1.5.5.2</li> <li>Yoast SEO 1.5.5.3</li> <li>Yoast SEO 1.5.6</li> <li>Yoast SEO 1.6</li> <li>Yoast SEO 1.6.1</li> <li>Yoast SEO 1.6.2</li> <li>Yoast SEO 1.6.3</li> <li>Yoast SEO 1.7</li> <li>Yoast SEO 1.7.1</li> </ul> Fri, 03 May 2019 11:13:45 GMTYoast SEO2777<p>Image attachment to the open graph was not properly validated.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 7.4</li> </ul> Fri, 03 May 2019 11:13:45 GMTYoast SEO2830<p>The debug views of com_users did not properly escape user supplied data, which leads to a potential XSS attack vector. <br> <br>CVE-2019-11809</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> </ul> Thu, 09 May 2019 08:35:58 GMTJoomla3093<p>Unescaped html chars could lead to a possible XSS attack. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> </ul> Mon, 13 May 2019 08:11:46 GMTYoast SEO3042<p>The promo extension messages were not properly escaped which could result in an XSS attack. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> </ul> Mon, 13 May 2019 08:11:46 GMTYoast SEO3043<p>Unescaped html chars at the frontend could result into an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> </ul> Mon, 13 May 2019 08:11:46 GMTYoast SEO3045<p>Newsletter template settings had been vulnerable to cross-site scripting attacks. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3096<p>Reflected XSS could be inserted into an attribute group name in Admin > Stores > Attribute Set. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3095<p>The customer shopping cart and coupons had been vulnerable to cross-site scripting attacks. <br> <br>Part of Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3103<p>A vulnerability in the Admin import feature permitted a user to upload a file that they could subsequently use to remotely execute malicious code. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3094<p>A user could upload unauthorized files while uploading videos. <br> <br>Part of Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3097<p>Input variables in the bulk editor and ajax module were vulnerable to XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 1.5.5</li> <li>Yoast SEO 1.5.5.1</li> <li>Yoast SEO 1.5.5.2</li> <li>Yoast SEO 1.5.5.3</li> <li>Yoast SEO 1.5.6</li> <li>Yoast SEO 1.6</li> <li>Yoast SEO 1.6.1</li> <li>Yoast SEO 1.6.2</li> <li>Yoast SEO 1.6.3</li> <li>Yoast SEO 1.7</li> <li>Yoast SEO 1.7.1</li> <li>Yoast SEO 2.0</li> <li>Yoast SEO 2.0.1</li> <li>Yoast SEO 2.1</li> <li>Yoast SEO 2.1.1</li> <li>Yoast SEO 2.2</li> <li>Yoast SEO 2.2.1</li> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> </ul> Tue, 14 May 2019 09:11:24 GMTYoast SEO3100<p>Multiple functions used to sanitize user input for cross-site scripting contexts could be bypassed. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Tue, 14 May 2019 09:11:24 GMTMagento3104<p>The upload settings for B2B quote files were vulnerable to remote code execution attacks. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Thu, 16 May 2019 08:32:20 GMTMagento3047<p>Administrators with limited privileges could upload an unauthorized template using the path traversal capability. Although most forms had not authorized this type of upload, an attacker could create a product with a file custom options that accepts an unauthorized template file. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Mon, 03 Jun 2019 14:26:51 GMTMagento3128<p>An administrator with access to Varnish configuration settings and the design configuration could trigger remote code execution through PHP object instantiation. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Mon, 03 Jun 2019 14:26:51 GMTMagento3129<p>Return merchandise authorizations (RMA) was vulnerable to cross-site request forgeries. <br> <br>Part of Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Mon, 03 Jun 2019 14:26:51 GMTMagento3130<p>Through the wysiwyg of the CMS module an authenticated user could delete the .htaccess file. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Mon, 03 Jun 2019 14:26:51 GMTMagento3131<p>Customer error display was not properly sanitized this could result in an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Tue, 04 Jun 2019 08:35:55 GMTWooCommerce3138<p>Image gallery function was not escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Wed, 05 Jun 2019 07:00:00 GMTWooCommerce3140<p>The admin templates were not properly sanitized which could result in an XSS attack. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0 beta 1</li> </ul> Tue, 11 Jun 2019 07:58:16 GMTPrestaShop3141<p>The XML safe was not properly escaped this could result in an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.10</li> <li>All in One SEO Pack 2.10.1</li> </ul> Tue, 11 Jun 2019 07:58:16 GMTAll in One SEO Pack3153<p>Image attributes were not properly escaped this could result in an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.3.9</li> <li>All in One SEO Pack 2.3.9.1</li> <li>All in One SEO Pack 2.3.9.2</li> <li>All in One SEO Pack 2.3.10</li> <li>All in One SEO Pack 2.3.10.1</li> <li>All in One SEO Pack 2.3.10.2</li> <li>All in One SEO Pack 2.3.11</li> <li>All in One SEO Pack 2.3.11.1</li> <li>All in One SEO Pack 2.3.11.2</li> <li>All in One SEO Pack 2.3.11.3</li> <li>All in One SEO Pack 2.3.11.4</li> <li>All in One SEO Pack 2.3.12</li> <li>All in One SEO Pack 2.3.12.1</li> <li>All in One SEO Pack 2.3.12.2</li> <li>All in One SEO Pack 2.3.12.2.1</li> <li>All in One SEO Pack 2.3.12.3</li> <li>All in One SEO Pack 2.3.12.4</li> <li>All in One SEO Pack 2.3.12.5</li> <li>All in One SEO Pack 2.3.13</li> <li>All in One SEO Pack 2.3.13.1</li> <li>All in One SEO Pack 2.3.13.2</li> <li>All in One SEO Pack 2.3.14</li> <li>All in One SEO Pack 2.3.14.1</li> <li>All in One SEO Pack 2.3.14.2</li> <li>All in One SEO Pack 2.3.15</li> <li>All in One SEO Pack 2.3.15.1</li> <li>All in One SEO Pack 2.3.15.2</li> <li>All in One SEO Pack 2.3.15.3</li> <li>All in One SEO Pack 2.3.16</li> <li>All in One SEO Pack 2.4</li> <li>All in One SEO Pack 2.4.1</li> <li>All in One SEO Pack 2.4.1.1</li> <li>All in One SEO Pack 2.4.2</li> <li>All in One SEO Pack 2.4.2.1</li> <li>All in One SEO Pack 2.4.3</li> <li>All in One SEO Pack 2.4.3.1</li> <li>All in One SEO Pack 2.4.4</li> <li>All in One SEO Pack 2.4.4.1</li> <li>All in One SEO Pack 2.4.5</li> <li>All in One SEO Pack 2.4.5.1</li> <li>All in One SEO Pack 2.4.6</li> <li>All in One SEO Pack 2.4.6.1</li> <li>All in One SEO Pack 2.5</li> <li>All in One SEO Pack 2.6.1</li> <li>All in One SEO Pack 2.7.2</li> <li>All in One SEO Pack 2.7.3</li> <li>All in One SEO Pack 2.8</li> <li>All in One SEO Pack 2.9</li> <li>All in One SEO Pack 2.9.1</li> <li>All in One SEO Pack 2.9.1.1</li> </ul> Tue, 11 Jun 2019 07:58:16 GMTAll in One SEO Pack3152<p>The CSV export of com_actionslogs was vulnerable to CSV injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> </ul> Wed, 12 Jun 2019 13:29:44 GMTJoomla3155<p>The sources at the sharedaddy were not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.7</li> <li>Jetpack 2.7.3</li> <li>Jetpack 2.7.4</li> <li>Jetpack 2.7.5</li> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> </ul> Wed, 19 Jun 2019 06:45:38 GMTJetpack3157<p>The UI of the publicize module was not properly escaped against XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.7</li> <li>Jetpack 2.7.3</li> <li>Jetpack 2.7.4</li> <li>Jetpack 2.7.5</li> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> </ul> Mon, 24 Jun 2019 07:15:08 GMTJetpack3158<p>The sitemap request server was not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 2.2</li> <li>Yoast SEO 2.2.1</li> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> </ul> Mon, 24 Jun 2019 07:15:08 GMTYoast SEO3162<p>Prevents a cross site request forgery vulnerability which could delete all Blocks at once <br> <br>Part of update SUPEE-10975</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> </ul> Tue, 25 Jun 2019 06:26:02 GMTMagento3135<p>The shortcodes module was not properly sanitized against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.8</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> </ul> Tue, 25 Jun 2019 06:26:02 GMTJetpack3160<p>The link in the column was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> </ul> Tue, 25 Jun 2019 06:26:02 GMTYoast SEO3165<p>A remote attacker is prevented from inserting arbitrary codes. <br> <br>Part of update Magento 2.2.7 and 2.1.16 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Wed, 26 Jun 2019 07:06:01 GMTMagento3133<p>The function used to prevent an XSS attack was not able to convert the input data in a string implicitly. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> </ul> Wed, 26 Jun 2019 07:06:01 GMTMagento3134<p>Some modules were not properly escaped to prevent an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 3.9.10</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> </ul> Wed, 26 Jun 2019 07:06:01 GMTJetpack3159<p>Certain forms and links were not properly escaped to against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> </ul> Wed, 26 Jun 2019 07:06:01 GMTYoast SEO3161<p>Certain inputs were not properly escaped against an XSS attack. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 2.0</li> <li>Yoast SEO 2.0.1</li> <li>Yoast SEO 2.1</li> <li>Yoast SEO 2.1.1</li> <li>Yoast SEO 2.2</li> <li>Yoast SEO 2.2.1</li> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> </ul> Wed, 26 Jun 2019 07:06:01 GMTYoast SEO3166<p>Data in product data variation was not properly sanitized against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Thu, 04 Jul 2019 08:23:57 GMTWooCommerce3178<p>The shipping notice was not properly escaped against XSS attack vectors. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTWooCommerce3179<p>The FILTER_SANITIZE_NUMBER_INT filter removes all illegal characters from a number.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTMagento3181<p>Messages for API were not properly encoded and sanitized before printed. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTWooCommerce3184<p>An attacker with access to upload could craft an image with a malicious file name in order to execute an XSS attack. <br> <br>Part of update SUPEE-10975</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTMagento3187<p>Newletter Template Settings are strengthened to prevent possible XSS Attack. <br> <br>Part of update SUPEE-10975</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTMagento3186<p>Prevents unwanted spamming of user wishlists. <br> <br>Part of update SUPEE-10975</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> </ul> Tue, 09 Jul 2019 06:59:50 GMTMagento3188<p>The coupon code and note were not properly escaped and sanitized against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> </ul> Thu, 11 Jul 2019 07:31:57 GMTWooCommerce3183<p>Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> </ul> Thu, 11 Jul 2019 13:21:57 GMTJoomla3220<p>Variation attribute were not properly escaped against possible XSS attack vectors. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Tue, 23 Jul 2019 06:45:47 GMTWooCommerce3250<p>The admin translation country option was not properly sanitized against possible XSS attack vectors. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Tue, 23 Jul 2019 06:45:47 GMTWooCommerce3252<p>An administrator user could achieve remote code execution by exploiting a vulnerability in the currency configuration. <br> <br>Part of update MAGENTO 2.2.5 AND 2.1.14 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.1.13</li> </ul> Tue, 23 Jul 2019 06:45:47 GMTMagento3251<p>Sales, coupon and customer report were not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Tue, 23 Jul 2019 06:45:47 GMTWooCommerce3249<p>The output of the structured data was not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Wed, 24 Jul 2019 07:07:18 GMTWooCommerce3167<p>An administrator user with access to product import could perform a directory traversal. <br> <br>Part of update MAGENTO 2.2.5 AND 2.1.14 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.13</li> </ul> Wed, 24 Jul 2019 07:07:18 GMTMagento3254<p>XSS When Viewing Catalog Category Link Widget Via Category Name. <br> <br>Part of Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Tue, 06 Aug 2019 08:18:24 GMTMagento3263<p>The single product billing and price was not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> </ul> Tue, 06 Aug 2019 08:18:24 GMTWooCommerce3268<p>The PayPal gateway was not properly escaped against XSS. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> </ul> Tue, 06 Aug 2019 08:18:24 GMTWooCommerce3271<p>The blog id was not specifically type casting and that could lead to code injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> </ul> Wed, 07 Aug 2019 14:36:09 GMTYoast SEO3270<p>The API helper was not properly sanitized against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> </ul> Wed, 07 Aug 2019 14:36:09 GMTWooCommerce3269<p>An administrator user could achieve remote code execution by exploiting a vulnerability in the swatches module. <br> <br>Part of update MAGENTO 2.2.5 AND 2.1.14 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> </ul> Tue, 13 Aug 2019 07:56:15 GMTMagento3261<p>A range of elements were not properly escaped against a possible XSS attack. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> </ul> Tue, 13 Aug 2019 07:56:15 GMTYoast SEO3265<p>An administrator with limited privileges could insert malicious code in e-mail templates, creating an opportunity for arbitrary remote code execution. <br> <br>Part of update MAGENTO 2.2.1, 2.1.10 AND 2.0.17 SECURITY UPDATE</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> </ul> Tue, 13 Aug 2019 07:56:15 GMTMagento3267<p>Inadequate checks in com_contact could allow mail submission in disabled forms. <br> <br>CVE Number: CVE-2019-15028</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> </ul> Wed, 14 Aug 2019 15:54:00 GMTJoomla3279<p>Reports and product list tables were not properly escaped and sanitized against XSS. <br> <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTWooCommerce3262<p>A reflected cross-site scripting vulnerability existed in the admin panel. This could be exploited by an authenticated user with privileges to the admin panel to inject malicious javascript. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTMagento3276<p>It had been discovered that Magento reveals HTTPOnly admin session cookie in the response of successful file upload in admin. Because the response content type was JSON, it was possible that attacker could steal admin session cookie by exploiting any XSS present in admin panel. Vulnerable file upload sections are in CMS, Catalog and Downloadable modules. <br> <br>Part of update Magento 2.2.6 and 2.1.15 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTMagento3278<p>The default configuration of the Magento "Email to a friend" feature could be abused by an attacker to send SPAM or spoofed emails. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTMagento3282<p>The secret key for the customer wasn't that strong and customer's password was not checked since login.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTPrestaShop3281<p>Licenses file was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTYoast SEO3283<p>A stored cross-site scripting vulnerability existed in the product comments field. Authenticated user with privileges to the Return Product comments field could inject malicious javascript. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTMagento3285<p>The tax rate and product importer of CSV files were not properly filtered and validated against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTWooCommerce3287<p>The list table for order and products were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTWooCommerce3288<p>The metabox of the order data and the HTML keys were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> </ul> Tue, 03 Sep 2019 09:06:53 GMTWooCommerce3289<p>Set also default MIME type to "text/plain" instead of HTML.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 09 Sep 2019 07:26:51 GMTWordPress3318<p>URL was not properly sanitized and validated to prevent open redirect and XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 09 Sep 2019 07:26:51 GMTWordPress3319<p>Post status display was vulnerable to XSS and was not properly sanitized. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.7.37</li> <li>WordPress 3.7.38</li> <li>WordPress 3.7.39</li> <li>WordPress 3.7.40</li> <li>WordPress 3.7.41</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.8.37</li> <li>WordPress 3.8.38</li> <li>WordPress 3.8.39</li> <li>WordPress 3.8.40</li> <li>WordPress 3.8.41</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 3.9.35</li> <li>WordPress 3.9.36</li> <li>WordPress 3.9.37</li> <li>WordPress 3.9.39</li> <li>WordPress 3.9.40</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.0.34</li> <li>WordPress 4.0.35</li> <li>WordPress 4.0.36</li> <li>WordPress 4.0.37</li> <li>WordPress 4.0.38</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.1.34</li> <li>WordPress 4.1.35</li> <li>WordPress 4.1.36</li> <li>WordPress 4.1.37</li> <li>WordPress 4.1.38</li> <li>WordPress 4.1.39</li> <li>WordPress 4.1.40</li> <li>WordPress 4.1.41</li> <li>WordPress 4.1.42</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.2.31</li> <li>WordPress 4.2.32</li> <li>WordPress 4.2.33</li> <li>WordPress 4.2.34</li> <li>WordPress 4.2.35</li> <li>WordPress 4.2.36</li> <li>WordPress 4.2.37</li> <li>WordPress 4.2.38</li> <li>WordPress 4.2.39</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.27</li> <li>WordPress 4.3.28</li> <li>WordPress 4.3.29</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.30</li> <li>WordPress 4.3.31</li> <li>WordPress 4.3.32</li> <li>WordPress 4.3.33</li> <li>WordPress 4.3.34</li> <li>WordPress 4.3.35</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.4.26</li> <li>WordPress 4.4.27</li> <li>WordPress 4.4.28</li> <li>WordPress 4.4.29</li> <li>WordPress 4.4.30</li> <li>WordPress 4.4.31</li> <li>WordPress 4.4.32</li> <li>WordPress 4.4.33</li> <li>WordPress 4.4.34</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.5.25</li> <li>WordPress 4.5.26</li> <li>WordPress 4.5.27</li> <li>WordPress 4.5.28</li> <li>WordPress 4.5.29</li> <li>WordPress 4.5.30</li> <li>WordPress 4.5.31</li> <li>WordPress 4.5.32</li> <li>WordPress 4.5.33</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.6.22</li> <li>WordPress 4.6.23</li> <li>WordPress 4.6.24</li> <li>WordPress 4.6.25</li> <li>WordPress 4.6.26</li> <li>WordPress 4.6.27</li> <li>WordPress 4.6.28</li> <li>WordPress 4.6.29</li> <li>WordPress 4.6.30</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.7.22</li> <li>WordPress 4.7.23</li> <li>WordPress 4.7.24</li> <li>WordPress 4.7.25</li> <li>WordPress 4.7.26</li> <li>WordPress 4.7.27</li> <li>WordPress 4.7.28</li> <li>WordPress 4.7.29</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.30</li> <li>WordPress 4.7.31</li> <li>WordPress 4.7.32</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.18</li> <li>WordPress 4.8.19</li> <li>WordPress 4.8.20</li> <li>WordPress 4.8.21</li> <li>WordPress 4.8.22</li> <li>WordPress 4.8.23</li> <li>WordPress 4.8.24</li> <li>WordPress 4.8.25</li> <li>WordPress 4.8.26</li> <li>WordPress 4.8.27</li> <li>WordPress 4.8.28</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 4.9.19</li> <li>WordPress 4.9.20</li> <li>WordPress 4.9.21</li> <li>WordPress 4.9.22</li> <li>WordPress 4.9.23</li> <li>WordPress 4.9.24</li> <li>WordPress 4.9.25</li> <li>WordPress 4.9.26</li> <li>WordPress 4.9.27</li> <li>WordPress 4.9.28</li> <li>WordPress 4.9.29</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0.15</li> <li>WordPress 5.0.16</li> <li>WordPress 5.0.17</li> <li>WordPress 5.0.18</li> <li>WordPress 5.0.19</li> <li>WordPress 5.0.20</li> <li>WordPress 5.0.21</li> <li>WordPress 5.0.22</li> <li>WordPress 5.0.23</li> <li>WordPress 5.0.24</li> <li>WordPress 5.0.25</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.12</li> <li>WordPress 5.1.13</li> <li>WordPress 5.1.14</li> <li>WordPress 5.1.15</li> <li>WordPress 5.1.16</li> <li>WordPress 5.1.17</li> <li>WordPress 5.1.18</li> <li>WordPress 5.1.19</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.20</li> <li>WordPress 5.1.21</li> <li>WordPress 5.1.22</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>Classic Editor 0.1</li> <li>Classic Editor 0.2</li> <li>Classic Editor 0.3</li> <li>Classic Editor 0.4</li> <li>Classic Editor 0.5</li> </ul> Mon, 09 Sep 2019 11:06:25 GMTWordPress3320<p>An authenticated user with admin privileges could execute arbitrary code through a crafted XML layout update. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Tue, 10 Sep 2019 09:16:37 GMTMagento3284<p>An authenticated user with admin privileges to the import feature could execute arbitrary code by uploading a malicious csv file. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Wed, 11 Sep 2019 07:37:10 GMTMagento3317<p>Inadequate validation could lead to disclosure of downloadable product samples even if marked as disabled. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Thu, 12 Sep 2019 07:10:07 GMTMagento3360<p>An attacker could delete Terms and Conditions within the context of an authenticated administrator's session through cross-site request forgery (CSRF). <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Mon, 16 Sep 2019 07:34:48 GMTMagento3361<p>The slideshow shortcode was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> </ul> Wed, 18 Sep 2019 07:24:38 GMTJetpack3359<p>Some required parameters for the Wufoo shortcode were not properly escaped to prevent XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> </ul> Wed, 18 Sep 2019 07:24:38 GMTJetpack3369<p>An authenticated user with privileges could create email templates that could leak sensitive data through malicious email template code. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 24 Sep 2019 08:17:45 GMTMagento3370<p>Description format was not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.3.9.2</li> <li>All in One SEO Pack 2.3.10</li> <li>All in One SEO Pack 2.3.10.1</li> <li>All in One SEO Pack 2.3.10.2</li> <li>All in One SEO Pack 2.3.11</li> <li>All in One SEO Pack 2.3.11.1</li> <li>All in One SEO Pack 2.3.11.2</li> <li>All in One SEO Pack 2.3.11.3</li> <li>All in One SEO Pack 2.3.11.4</li> <li>All in One SEO Pack 2.3.12</li> <li>All in One SEO Pack 2.3.12.1</li> <li>All in One SEO Pack 2.3.12.2</li> <li>All in One SEO Pack 2.3.12.2.1</li> <li>All in One SEO Pack 2.3.12.3</li> <li>All in One SEO Pack 2.3.12.4</li> <li>All in One SEO Pack 2.3.12.5</li> <li>All in One SEO Pack 2.3.13</li> <li>All in One SEO Pack 2.3.13.1</li> <li>All in One SEO Pack 2.3.13.2</li> <li>All in One SEO Pack 2.3.14</li> <li>All in One SEO Pack 2.3.14.1</li> <li>All in One SEO Pack 2.3.14.2</li> <li>All in One SEO Pack 2.3.15</li> <li>All in One SEO Pack 2.3.15.1</li> <li>All in One SEO Pack 2.3.15.2</li> <li>All in One SEO Pack 2.3.15.3</li> <li>All in One SEO Pack 2.3.16</li> <li>All in One SEO Pack 2.4</li> <li>All in One SEO Pack 2.4.1</li> <li>All in One SEO Pack 2.4.1.1</li> <li>All in One SEO Pack 2.4.2</li> <li>All in One SEO Pack 2.4.2.1</li> <li>All in One SEO Pack 2.4.3</li> <li>All in One SEO Pack 2.4.3.1</li> <li>All in One SEO Pack 2.4.4</li> <li>All in One SEO Pack 2.4.4.1</li> <li>All in One SEO Pack 2.4.5</li> <li>All in One SEO Pack 2.4.5.1</li> <li>All in One SEO Pack 2.4.6</li> <li>All in One SEO Pack 2.4.6.1</li> <li>All in One SEO Pack 2.5</li> <li>All in One SEO Pack 2.6.1</li> <li>All in One SEO Pack 2.7.2</li> <li>All in One SEO Pack 2.7.3</li> <li>All in One SEO Pack 2.8</li> <li>All in One SEO Pack 2.9</li> <li>All in One SEO Pack 2.9.1</li> <li>All in One SEO Pack 2.9.1.1</li> <li>All in One SEO Pack 2.10</li> <li>All in One SEO Pack 2.10.1</li> <li>All in One SEO Pack 2.11</li> <li>All in One SEO Pack 2.12</li> <li>All in One SEO Pack 2.12.1</li> <li>All in One SEO Pack 3.0</li> <li>All in One SEO Pack 3.0.1</li> <li>All in One SEO Pack 3.0.2</li> <li>All in One SEO Pack 3.0.3</li> <li>All in One SEO Pack 3.0.4</li> <li>All in One SEO Pack 3.1</li> <li>All in One SEO Pack 3.1.1</li> <li>All in One SEO Pack 3.2</li> <li>All in One SEO Pack 3.2.1</li> <li>All in One SEO Pack 3.2.2</li> <li>All in One SEO Pack 3.2.3</li> <li>All in One SEO Pack 3.2.4</li> <li>All in One SEO Pack 3.2.5</li> <li>All in One SEO Pack 3.2.6</li> </ul> Tue, 24 Sep 2019 08:17:45 GMTAll in One SEO Pack3371<p>Shortcodes for simple payments were not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> </ul> Thu, 26 Sep 2019 07:06:54 GMTJetpack3373<p>Inadequate escaping allowed XSS attacks using the logo parameter of the default templates. <br> <br>CVE Number: CVE-2019-16725</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> </ul> Thu, 26 Sep 2019 07:06:54 GMTJoomla3377<p>Menu tab was not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce list</li> </ul> Mon, 30 Sep 2019 08:20:44 GMTWooCommerce3381<p>Auth form grant access were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Tue, 01 Oct 2019 06:44:03 GMTWooCommerce3380<p>Admin meta boxes were not properly sanitized against XSS</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Tue, 01 Oct 2019 06:44:03 GMTWooCommerce3382<p>Admin helper current filter was not properly sanitized against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Thu, 10 Oct 2019 07:08:23 GMTWooCommerce3383<p>Shipping zones settings were not properly sanitized against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Thu, 10 Oct 2019 07:08:23 GMTWooCommerce3384<p>Meta boxes product images were not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Thu, 10 Oct 2019 07:08:23 GMTWooCommerce3385<p>Admin page add-ons were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 10 Oct 2019 07:08:23 GMTWooCommerce3388<p>A PHP Object Injection vulnerability in the model design package could be exploited by an authenticated user with administrator privileges to execute arbitrate code. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Thu, 10 Oct 2019 07:08:23 GMTMagento3387<p>The coupon code and note were not properly escaped and sanitized against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> </ul> Mon, 14 Oct 2019 07:56:29 GMTWooCommerce3386<p>A user with administrator privileges and access to the advanced admin logging configuration could trigger remote code execution via PHP Object Injection. <br> <br>Part of SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.4.1</li> </ul> Mon, 14 Oct 2019 07:56:29 GMTMagento3389<p>A user with administrator privileges and access to the advanced admin logging configuration could trigger remote code execution via PHP Object Injection. <br> <br>Part of SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Mon, 14 Oct 2019 07:56:29 GMTMagento3391<p>An authenticated user with privileges to the Currency Symbols functionality could inject malicious javascript. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Mon, 14 Oct 2019 07:56:29 GMTMagento3390<p>Reject file paths that contain sub-directory paths.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3411<p>The static query property was removed in order to prevent unauthenticated view of publicly queryable content types.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3410<p>A method to poison the cache of JSON GET requests via the Vary: Origin header was detected and prevented.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.4.26</li> <li>WordPress 4.4.27</li> <li>WordPress 4.4.28</li> <li>WordPress 4.4.29</li> <li>WordPress 4.4.30</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.5.25</li> <li>WordPress 4.5.26</li> <li>WordPress 4.5.27</li> <li>WordPress 4.5.28</li> <li>WordPress 4.5.29</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.6.22</li> <li>WordPress 4.6.23</li> <li>WordPress 4.6.24</li> <li>WordPress 4.6.25</li> <li>WordPress 4.6.26</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.7.22</li> <li>WordPress 4.7.23</li> <li>WordPress 4.7.24</li> <li>WordPress 4.7.25</li> <li>WordPress 4.7.26</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.18</li> <li>WordPress 4.8.19</li> <li>WordPress 4.8.20</li> <li>WordPress 4.8.21</li> <li>WordPress 4.8.22</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 4.9.19</li> <li>WordPress 4.9.20</li> <li>WordPress 4.9.21</li> <li>WordPress 4.9.22</li> <li>WordPress 4.9.23</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0.15</li> <li>WordPress 5.0.16</li> <li>WordPress 5.0.17</li> <li>WordPress 5.0.18</li> <li>WordPress 5.0.19</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.12</li> <li>WordPress 5.1.13</li> <li>WordPress 5.1.14</li> <li>WordPress 5.1.15</li> <li>WordPress 5.1.16</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3413<p>HTTP API: Protect against hex interpretation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3414<p>Ensure that admin referrer nonce is valid.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3416<p>Adjusted registering scripts.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 4.9.19</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> </ul> Mon, 21 Oct 2019 10:50:30 GMTWordPress3412<p>Various admin sections were not properly sanitized against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 1.5.5</li> <li>Yoast SEO 1.5.5.1</li> <li>Yoast SEO 1.5.5.2</li> <li>Yoast SEO 1.5.5.3</li> <li>Yoast SEO 1.5.6</li> <li>Yoast SEO 1.6</li> <li>Yoast SEO 1.6.1</li> <li>Yoast SEO 1.6.2</li> <li>Yoast SEO 1.6.3</li> <li>Yoast SEO 1.7</li> <li>Yoast SEO 1.7.1</li> <li>Yoast SEO 2.0</li> <li>Yoast SEO 2.0.1</li> <li>Yoast SEO 2.1</li> <li>Yoast SEO 2.1.1</li> <li>Yoast SEO 2.2</li> <li>Yoast SEO 2.2.1</li> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> </ul> Mon, 28 Oct 2019 08:28:05 GMTYoast SEO3495<p>The collapsible and metabox section were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> </ul> Mon, 28 Oct 2019 08:28:05 GMTYoast SEO3678<p>The plain email content was not properly escaped against XSS. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Mon, 28 Oct 2019 08:28:05 GMTWooCommerce3497<p>A missing token check in com_template had caused a CSRF vulnerability. <br> <br>CVE Number: CVE-2019-18650</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> </ul> Wed, 06 Nov 2019 13:47:19 GMTJoomla3711<p>Missing access check in the phputf8 mapping files could lead to a path disclosure. <br> <br>CVE Number: CVE-2019-18674</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> </ul> Wed, 06 Nov 2019 13:47:19 GMTJoomla3712<p>Mini-cart page was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 07 Nov 2019 08:33:11 GMTWooCommerce3682<p>The checkout coupon message was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 07 Nov 2019 08:33:11 GMTWooCommerce3683<p>A stored cross-site scripting vulnerability had existed in the WYSIWYG editor. This could be exploited by an authenticated user with privileges to the editor to inject malicious SWF files. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Wed, 13 Nov 2019 08:08:13 GMTMagento3676<p>An authenticated user could manipulate data without required validation. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Wed, 13 Nov 2019 08:08:13 GMTMagento3709<p>An authenticated user with privileges to edit block permission, import dataflow functionality, and modify CMS content could execute arbitrary code by importing malicious dataflow profiles. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Wed, 13 Nov 2019 08:08:13 GMTMagento3708<p>An attacker could delete the store design schedule within the context of an authenticated administrator's session through cross-site request forgery. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Wed, 13 Nov 2019 08:08:13 GMTMagento3716<p>Cryptographically weak pseudo-rando number generator was used in multiple security relevant contexts (e.g., anti-CSRF tokens) allowing malicious user to predict random values. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTMagento3677<p>The order, download and review sections were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTWooCommerce3710<p>An authenticated user with administrative privileges could embed arbitrary code in the product widget chooser section of the Admin. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTMagento3717<p>An authenticated user with administrative privileges to store configuration could execute arbitrary code via server side request forgery (SSRF) issued to Redis. SSRF had facilitated through crafted gateway XML URL configuration. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTMagento3713<p>A cross-site request forgery (CSRF) bug in the reviews feature could be abused to delete a customer review. <br> <br>Part of update SUPEE-11155</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTMagento3715<p>The import and export tool was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTYoast SEO3732<p>The order section was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Tue, 19 Nov 2019 12:46:10 GMTWooCommerce3731<p>Plain email and my account sections were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Wed, 20 Nov 2019 08:04:28 GMTWooCommerce3719<p>An attacker could delete SOAP/XML-RPC-User and SOAP/XML-RPC-Role within the context of an authenticated administrator's session through cross-site request forgery. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Mon, 25 Nov 2019 09:05:08 GMTMagento3760<p>An authenticated user with privileges to configure products could execute arbitrary PHP code. <br> <br>Part of update SUPEE-11086</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> </ul> Wed, 27 Nov 2019 09:27:13 GMTMagento3718<p>Data escaped and validated. Plus translator comment documentation added. <br> <br>Official description: Admin metaboxes views translation escaping fix.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> </ul> Wed, 27 Nov 2019 09:27:13 GMTWooCommerce3777<p>An authenticated user with privileges to configure email templates could execute arbitrary SQL queries. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Wed, 27 Nov 2019 09:27:13 GMTMagento3761<p>An authenticated customer could control other customer's requistion lists by using a web API endpoint to send a request to the server. (This overrides the customer_id parameter.) <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Wed, 27 Nov 2019 09:27:13 GMTMagento3839<p>An authenticated user could view Personally identifiable details of another user via exploiting an Insecure Direct Object References vulnerability. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> </ul> Wed, 04 Dec 2019 09:28:52 GMTMagento3851<p>A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.3</li> </ul> Thu, 05 Dec 2019 07:37:37 GMTMagento3853<p>The login form was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Thu, 05 Dec 2019 07:37:37 GMTWooCommerce3857<p>Form pay message was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 05 Dec 2019 07:37:37 GMTWooCommerce3858<p>User input for submitted URL is sanitized before checked its validity and saved to the database. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> </ul> Mon, 09 Dec 2019 08:38:58 GMTYoast SEO3847<p>The review order view was not properly escaped against XSS. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Mon, 09 Dec 2019 08:38:58 GMTWooCommerce3859<p>Thank-you-page was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Mon, 09 Dec 2019 08:38:58 GMTWooCommerce3860<p>When adding a new order the email template was not properly escaped against XSS. <br> <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Mon, 09 Dec 2019 08:38:58 GMTWooCommerce3861<p>An authenticated user with privileges to product name fields on the Admin could use stored cross-site scripting vulnerability to embed malicious code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> </ul> Wed, 11 Dec 2019 08:54:05 GMTMagento3854<p>Cart template was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Wed, 11 Dec 2019 08:54:05 GMTWooCommerce3862<p>An authenticated user with privileges to the Admin **Stores** > **Attributes** > **Product ** configuration area could use a stored cross-site scripting vulnerability to embed malicious code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> </ul> Thu, 12 Dec 2019 08:23:35 GMTMagento3855<p>An authenticated user could embed malicious code through a stored cross-site scripting vulnerability or an SQL injection vulnerability in the Catalog section by manipulating attribute_code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> </ul> Thu, 12 Dec 2019 08:23:35 GMTMagento3856<p>Escaped unicode characters became unescaped in unsafe HTML during JSON decoding.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 5.3</li> </ul> Sat, 14 Dec 2019 17:47:22 GMTWordPress3878<p>Unprivileged user could make a post sticky via the REST API.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> </ul> Sat, 14 Dec 2019 17:47:22 GMTWordPress3879<p>Update makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.5</li> <li>WordPress 3.5.1</li> <li>WordPress 3.5.2</li> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> </ul> Sat, 14 Dec 2019 17:47:22 GMTWordPress3880<p>The wp_targeted_link_rel() function was not properly escaped against stored XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> </ul> Sat, 14 Dec 2019 17:47:22 GMTWordPress3881<p>Missing access check in framework files could lead to a path disclosure. <br> <br>CVE Number: CVE-2019-19845</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> </ul> Thu, 19 Dec 2019 16:25:15 GMTJoomla3893<p>The lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors. <br> <br>CVE number: CVE-2019-19846</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> </ul> Thu, 19 Dec 2019 16:25:15 GMTJoomla3892<p>The Media Library module had a security vulnerability whereby it didn't sufficiently restrict access to media items in certain configurations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> </ul> Fri, 20 Dec 2019 17:16:12 GMTDrupal3895<p>Users with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system files such as .htaccess in order to bypass protections afforded by Drupal's default .htaccess file.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> </ul> Fri, 20 Dec 2019 17:16:12 GMTDrupal3894<p>This could cause a site to be impaired until caches were rebuilt.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> </ul> Fri, 20 Dec 2019 17:16:12 GMTDrupal3896<p>Multiple vulnerabilities were possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> </ul> Fri, 20 Dec 2019 17:16:12 GMTDrupal3897<p>Authentication header was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 16 Jan 2020 08:34:54 GMTWooCommerce3889<p>The plain replace part was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> </ul> Thu, 16 Jan 2020 08:34:54 GMTWooCommerce3890<p>Util/PHP/eval-stdin.php in PHPUnit before 7.5.19 and 8.5.1 allowed remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Magento 2.2.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>OrangeHRM 4.0</li> <li>OrangeHRM 4.1</li> <li>OrangeHRM 4.1.1</li> <li>OrangeHRM 4.1.2</li> <li>OrangeHRM 4.1.2.1</li> <li>OrangeHRM 4.2</li> <li>OrangeHRM 4.2.0.1</li> <li>OrangeHRM 4.3</li> <li>OrangeHRM 4.3.1</li> <li>OrangeHRM 4.3.2</li> <li>OrangeHRM 4.3.3</li> <li>OrangeHRM 4.3.4</li> <li>OrangeHRM 4.3.5</li> <li>OrangeHRM 4.4</li> <li>OrangeHRM 4.5</li> <li>OrangeHRM 4.6</li> <li>OrangeHRM 4.6.0.1</li> <li>OrangeHRM 4.7</li> <li>OrangeHRM 4.8</li> <li>PhpUnit 4.8.22</li> <li>PhpUnit 4.8.23</li> <li>PhpUnit 4.8.24</li> <li>PhpUnit 4.8.25</li> <li>PhpUnit 4.8.26</li> <li>PhpUnit 4.8.27</li> <li>PhpUnit 4.8.28</li> <li>PhpUnit 4.8.29</li> <li>PhpUnit 4.8.30</li> <li>PhpUnit 4.8.31</li> <li>PhpUnit 4.8.32</li> <li>PhpUnit 4.8.33</li> <li>PhpUnit 4.8.34</li> <li>PhpUnit 4.8.35</li> <li>PhpUnit 4.8.36</li> <li>PhpUnit 5.0.10</li> <li>PhpUnit 5.1.0</li> <li>PhpUnit 5.1.1</li> <li>PhpUnit 5.1.2</li> <li>PhpUnit 5.1.3</li> <li>PhpUnit 5.1.4</li> <li>PhpUnit 5.1.5</li> <li>PhpUnit 5.1.6</li> <li>PhpUnit 5.1.7</li> <li>PhpUnit 5.2.0</li> <li>PhpUnit 5.2.1</li> <li>PhpUnit 5.2.2</li> <li>PhpUnit 5.2.3</li> <li>PhpUnit 5.2.4</li> <li>PhpUnit 5.2.5</li> <li>PhpUnit 5.2.6</li> <li>PhpUnit 5.2.7</li> <li>PhpUnit 5.2.8</li> <li>PhpUnit 5.2.9</li> <li>PhpUnit 5.2.10</li> <li>PhpUnit 5.2.11</li> <li>PhpUnit 5.2.12</li> <li>PhpUnit 5.3.0</li> <li>PhpUnit 5.3.1</li> <li>PhpUnit 5.3.2</li> <li>PhpUnit 5.3.3</li> <li>PhpUnit 5.3.4</li> <li>PhpUnit 5.3.5</li> <li>PhpUnit 5.4.0</li> <li>PhpUnit 5.4.1</li> <li>PhpUnit 5.4.2</li> <li>PhpUnit 5.4.3</li> <li>PhpUnit 5.4.4</li> <li>PhpUnit 5.4.5</li> <li>PhpUnit 5.4.6</li> <li>PhpUnit 5.4.7</li> <li>PhpUnit 5.4.8</li> <li>PhpUnit 5.5.0</li> <li>PhpUnit 5.5.1</li> <li>PhpUnit 5.5.2</li> <li>PhpUnit 5.5.3</li> <li>PhpUnit 5.5.4</li> <li>PhpUnit 5.5.5</li> <li>PhpUnit 5.5.6</li> <li>PhpUnit 5.5.7</li> <li>PhpUnit 5.6.0</li> <li>PhpUnit 5.6.1</li> <li>PhpUnit 5.6.2</li> <li>PhpUnit 5.6.3</li> <li>PhpUnit 5.6.4</li> <li>PhpUnit 5.6.5</li> <li>PhpUnit 5.6.6</li> <li>PhpUnit 5.6.7</li> <li>PhpUnit 5.6.8</li> <li>PhpUnit 5.7.0</li> <li>PhpUnit 5.7.1</li> <li>PhpUnit 5.7.2</li> <li>PhpUnit 5.7.3</li> <li>PhpUnit 5.7.4</li> <li>PhpUnit 5.7.5</li> <li>PhpUnit 5.7.6</li> <li>PhpUnit 5.7.7</li> <li>PhpUnit 5.7.8</li> <li>PhpUnit 5.7.9</li> <li>PhpUnit 5.7.10</li> <li>PhpUnit 5.7.11</li> <li>PhpUnit 5.7.12</li> <li>PhpUnit 5.7.13</li> <li>PhpUnit 5.7.14</li> <li>PhpUnit 5.7.15</li> <li>PhpUnit 5.7.16</li> <li>PhpUnit 5.7.17</li> <li>PhpUnit 5.7.18</li> <li>PhpUnit 5.7.19</li> <li>PhpUnit 5.7.20</li> <li>PhpUnit 5.7.21</li> <li>PhpUnit 5.7.22</li> <li>PhpUnit 5.7.23</li> <li>PhpUnit 5.7.24</li> <li>PhpUnit 5.7.25</li> <li>PhpUnit 5.7.26</li> <li>PhpUnit 5.7.27</li> <li>PhpUnit 6.0.0</li> <li>PhpUnit 6.0.1</li> <li>PhpUnit 6.0.2</li> <li>PhpUnit 6.0.3</li> <li>PhpUnit 6.0.4</li> <li>PhpUnit 6.0.5</li> <li>PhpUnit 6.0.6</li> <li>PhpUnit 6.0.7</li> <li>PhpUnit 6.0.8</li> <li>PhpUnit 6.0.9</li> <li>PhpUnit 6.0.10</li> <li>PhpUnit 6.0.11</li> <li>PhpUnit 6.0.12</li> <li>PhpUnit 6.0.13</li> <li>PhpUnit 6.1.0</li> <li>PhpUnit 6.1.1</li> <li>PhpUnit 6.1.2</li> <li>PhpUnit 6.1.3</li> <li>PhpUnit 6.1.4</li> <li>PhpUnit 6.2.0</li> <li>PhpUnit 6.2.1</li> <li>PhpUnit 6.2.2</li> <li>PhpUnit 6.2.3</li> <li>PhpUnit 6.2.4</li> <li>PhpUnit 6.3.0</li> <li>PhpUnit 6.3.1</li> <li>PhpUnit 6.4.0</li> <li>PhpUnit 6.4.1</li> <li>PhpUnit 6.4.2</li> <li>PhpUnit 6.4.3</li> <li>PhpUnit 6.4.4</li> <li>PhpUnit 6.5.0</li> <li>PhpUnit 6.5.1</li> <li>PhpUnit 6.5.2</li> <li>PhpUnit 6.5.3</li> <li>PhpUnit 6.5.4</li> <li>PhpUnit 6.5.5</li> <li>PhpUnit 6.5.6</li> <li>PhpUnit 6.5.7</li> <li>PhpUnit 6.5.8</li> <li>PhpUnit 6.5.9</li> <li>PhpUnit 6.5.10</li> <li>PhpUnit 6.5.11</li> <li>PhpUnit 6.5.12</li> <li>PhpUnit 6.5.13</li> <li>PhpUnit 6.5.14</li> <li>PhpUnit 7.0.0</li> <li>PhpUnit 7.0.1</li> <li>PhpUnit 7.0.2</li> <li>PhpUnit 7.0.3</li> <li>PhpUnit 7.1.0</li> <li>PhpUnit 7.1.1</li> <li>PhpUnit 7.1.2</li> <li>PhpUnit 7.1.3</li> <li>PhpUnit 7.1.4</li> <li>PhpUnit 7.1.5</li> <li>PhpUnit 7.2.0</li> <li>PhpUnit 7.2.1</li> <li>PhpUnit 7.2.2</li> <li>PhpUnit 7.2.3</li> <li>PhpUnit 7.2.4</li> <li>PhpUnit 7.2.5</li> <li>PhpUnit 7.2.6</li> <li>PhpUnit 7.2.7</li> <li>PhpUnit 7.3.0</li> <li>PhpUnit 7.3.1</li> <li>PhpUnit 7.3.2</li> <li>PhpUnit 7.3.3</li> <li>PhpUnit 7.3.4</li> <li>PhpUnit 7.3.5</li> <li>PhpUnit 7.4.0</li> <li>PhpUnit 7.4.1</li> <li>PhpUnit 7.4.2</li> <li>PhpUnit 7.4.3</li> <li>PhpUnit 7.4.4</li> <li>PhpUnit 7.4.5</li> <li>PhpUnit 7.5.0</li> <li>PhpUnit 7.5.1</li> <li>PhpUnit 7.5.2</li> <li>PhpUnit 7.5.3</li> <li>PhpUnit 7.5.4</li> <li>PhpUnit 7.5.5</li> <li>PhpUnit 7.5.6</li> <li>PhpUnit 7.5.7</li> <li>PhpUnit 7.5.8</li> <li>PhpUnit 7.5.9</li> <li>PhpUnit 7.5.10</li> <li>PhpUnit 7.5.11</li> <li>PhpUnit 7.5.12</li> <li>PhpUnit 7.5.13</li> <li>PhpUnit 7.5.14</li> <li>PhpUnit 7.5.15</li> <li>PhpUnit 7.5.16</li> <li>PhpUnit 7.5.17</li> <li>PhpUnit 7.5.18</li> <li>PhpUnit 8.0.0</li> <li>PhpUnit 8.0.1</li> <li>PhpUnit 8.0.2</li> <li>PhpUnit 8.0.3</li> <li>PhpUnit 8.0.4</li> <li>PhpUnit 8.0.5</li> <li>PhpUnit 8.0.6</li> <li>PhpUnit 8.1.0</li> <li>PhpUnit 8.1.1</li> <li>PhpUnit 8.1.2</li> <li>PhpUnit 8.1.3</li> <li>PhpUnit 8.1.4</li> <li>PhpUnit 8.1.5</li> <li>PhpUnit 8.1.6</li> <li>PhpUnit 8.2.0</li> <li>PhpUnit 8.2.1</li> <li>PhpUnit 8.2.2</li> <li>PhpUnit 8.2.3</li> <li>PhpUnit 8.2.4</li> <li>PhpUnit 8.2.5</li> <li>PhpUnit 8.3.0</li> <li>PhpUnit 8.3.1</li> <li>PhpUnit 8.3.2</li> <li>PhpUnit 8.3.3</li> <li>PhpUnit 8.3.4</li> <li>PhpUnit 8.3.5</li> <li>PhpUnit 8.4.0</li> <li>PhpUnit 8.4.1</li> <li>PhpUnit 8.4.2</li> <li>PhpUnit 8.4.3</li> <li>PhpUnit 8.5.0</li> </ul> Thu, 16 Jan 2020 08:34:54 GMTPhpUnit3907<p>Address part was not properly escaped to prevent XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTWooCommerce3906<p>Various part in cart totals were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTWooCommerce3908<p>Prevent notice on post without valid author by checking user object.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTYoast SEO3905<p>An authenticated user with administrative privileges could embed malicious code in the Attribute Label for Media Attributes section in the admin panel. <br> <br>Part of update release 2.3.1, 2.2.8, 2.1.17</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTMagento3903<p>An authenticated user with access to email templates could send malicious SQL queries and obtain access to sensitive information stored in the database. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTMagento3901<p>Attributes were not properly sanitized as keys to prevent XSS. <br></p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTYoast SEO3909<p>Name and Json data were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> </ul> Thu, 23 Jan 2020 14:34:05 GMTYoast SEO3912<p> An authenticated user could craft a malicious payload in the template Name field for email templates in the Design Configuration dashboard. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> </ul> Mon, 27 Jan 2020 11:53:03 GMTMagento3877<p>The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID' parameter of the ~/debug-chart/index.php file. This makes it possible for unauthenticated attackers to read .txt files outside of the intended directory.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>InfiniteWP Client 1.8.1</li> <li>InfiniteWP Client 1.8.3</li> <li>InfiniteWP Client 1.8.5</li> <li>InfiniteWP Client 1.8.6</li> <li>InfiniteWP Client 1.9.4.1</li> <li>InfiniteWP Client 1.9.4.4</li> </ul> Mon, 27 Jan 2020 11:53:03 GMTInfiniteWP Client3916<p>Official description: An authenticated user could manipulate a storefront's session validation setting, leading to insecure authentication and session management. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Tue, 28 Jan 2020 07:47:33 GMTMagento3913<p>Attribute and URL were not properly escaped.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTYoast SEO3919<p>API and 3rd party messages were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTJetpack3920<p>Redirects for disable author archives for customers were not safe. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.8.0-beta.1</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTWooCommerce3918<p>Token checks were missing in the batch actions of various components caused CSRF vulnerabilities. <br> <br>CVE Number: CVE-2020-8419</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTJoomla3929<p>It was missing a CSRF token check in the LESS compiler of com_templates caused a CSRF vulnerability. <br> <br>CVE-2020-8420</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTJoomla3930<p>Inadequate escaping of usernames allowed XSS attacks in com_actionlogs <br> <br>CVE Number: CVE-2020-8421</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> </ul> Fri, 31 Jan 2020 08:53:50 GMTJoomla3928<p>Cross sell in cart was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce list</li> </ul> Wed, 05 Feb 2020 16:14:23 GMTWooCommerce3917<p>An authenticated user could inject arbitrary JavaScript code into a dynamic block when invoking Page Builder on a product. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Wed, 05 Feb 2020 16:14:23 GMTMagento3931<p>An authenticated user could inject arbitrary JavaScript code into the code field of an inventory source. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Tue, 11 Feb 2020 15:07:10 GMTMagento3934<p>An authenticated administrator could inject arbitrary JavaScript code when adding an image during simple product creation. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Tue, 11 Feb 2020 15:07:10 GMTMagento3936<p>The product images, page addons, and table list logging were not properly escaped agains XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce list</li> </ul> Mon, 17 Feb 2020 09:13:00 GMTWooCommerce3937<p>An unauthenticated user could insert a malicious payload through Page Builder template methods. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> </ul> Wed, 19 Feb 2020 09:45:21 GMTMagento3874<p>HTTP_USER_AGENT was not properly sanitized against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> </ul> Wed, 19 Feb 2020 09:45:21 GMTYoast SEO3938<p>Missed capabilities checks, leading to authenticated, stored cross-site scripting (XSS) and potentially privilege escalation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>ThemeGrill Demo Importer 1.3.4</li> <li>ThemeGrill Demo Importer 1.4.0</li> <li>ThemeGrill Demo Importer 1.4.1</li> <li>ThemeGrill Demo Importer 1.4.2</li> <li>ThemeGrill Demo Importer 1.4.3</li> <li>ThemeGrill Demo Importer 1.5.0</li> <li>ThemeGrill Demo Importer 1.5.1</li> <li>ThemeGrill Demo Importer 1.5.2</li> <li>ThemeGrill Demo Importer 1.5.3</li> <li>ThemeGrill Demo Importer 1.5.4</li> <li>ThemeGrill Demo Importer 1.5.5</li> <li>ThemeGrill Demo Importer 1.5.6</li> <li>ThemeGrill Demo Importer 1.5.7</li> <li>ThemeGrill Demo Importer 1.5.8</li> <li>ThemeGrill Demo Importer 1.5.9</li> <li>ThemeGrill Demo Importer 1.6.0</li> <li>ThemeGrill Demo Importer 1.6.1</li> </ul> Wed, 19 Feb 2020 15:38:23 GMTThemeGrill Demo Importer3945<p>Missed capabilities checks, leading to authenticated, stored cross-site scripting (XSS) and potentially privilege escalation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>CookieYes – Cookie Banner for Cookie Consent 1.6.6</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.6.7</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.6.8</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.6.9</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.6.10</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.0</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.1</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.2</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.3</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.4</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.5</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.6</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.7</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.8</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.7.9</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.8.0</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.8.1</li> <li>CookieYes – Cookie Banner for Cookie Consent 1.8.2</li> </ul> Wed, 19 Feb 2020 15:38:23 GMTCookieYes – Cookie Banner for Cookie Consent3944<p>Message was not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce list</li> </ul> Wed, 26 Feb 2020 10:54:09 GMTWooCommerce3948<p>Duplicate product action message was not properly sanitized to avoid XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce list</li> </ul> Wed, 26 Feb 2020 10:54:09 GMTWooCommerce3947<p>An authenticated user with administrative privileges to import features could execute arbitrary code through a crafted configuration archive file upload. <br> <br>Part of release Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Thu, 27 Feb 2020 07:48:43 GMTMagento3914<p>An attacker could access files outside of Duplicator’s intended directory by submitting values like ../../../file.php to navigate throughout the server’s file structure.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Duplicator 1.3.24</li> <li>Duplicator 1.3.26</li> </ul> Thu, 27 Feb 2020 14:04:26 GMTDuplicator3954<p>An authenticated user with privileges to an account with permission to edit newsletter templates could exfiltrate the Admin login data and reset their password, effectively performing a privilege escalation. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 02 Mar 2020 08:27:55 GMTMagento3949<p>Weak cryptographic function used for storing the failed login attempts for customer accounts. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> </ul> Mon, 02 Mar 2020 08:27:55 GMTMagento3950<p>An authenticated user could abuse the blockDirective() function and inject malicious JavaScript in the cache of the Admin and inject arbitrary JavaScript code by manipulating a section of a POST request that is related to customer's email address. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> </ul> Wed, 04 Mar 2020 15:45:16 GMTMagento3904<p>An authenticated user with admin privileges to create sitemaps could execute arbitrary code by crafted filenames that include php extension within the XML filename. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Wed, 04 Mar 2020 15:45:16 GMTMagento3956<p>[20200303]: Various actions in com_templates lacked the required ACL checks, leading to various potential attack vectors. <br>[20200301]: Missing token checks in the image actions of com_templates caused CSRF vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> </ul> Thu, 12 Mar 2020 17:13:30 GMTJoomla3965<p>Missing length checks in the user table could lead to the creation of users with duplicate usernames and/or email addresses.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> </ul> Thu, 12 Mar 2020 17:13:30 GMTJoomla3966<p>Incorrect Access Control in the SQL fieldtype of com_fields allowed access for non-superadmin users.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> </ul> Thu, 12 Mar 2020 17:13:30 GMTJoomla3969<p>Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allowed XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> </ul> Thu, 12 Mar 2020 17:13:30 GMTJoomla3968<p>The lack of type casting of a variable in SQL statement lead to a SQL injection vulnerability in the "Featured Articles" frontend menutype.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> </ul> Mon, 16 Mar 2020 11:26:37 GMTJoomla3976<p>When a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It's the same with CustomerForm, you're able to change the id_customer and change all information of all accounts. <br> <br>CVE-2020-5250</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> </ul> Wed, 18 Mar 2020 14:37:22 GMTPrestaShop3977<p>An authenticated user could inject form data and bypass security protections that prevent arbitrary PHP script upload. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 30 Mar 2020 07:39:09 GMTMagento3962<p>An attacker could delete user roles within the context of an authenticated administrator's session through cross-site request forgery (CSRF). <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 30 Mar 2020 07:39:09 GMTMagento3980<p>Checkbox text was not properly sanitized in checkout module. <br> <br>Part of update Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Thu, 02 Apr 2020 07:03:13 GMTMagento3982<p>Users with permission to edit products could inject an XSS payload when saving a product with a downloadable link. <br> <br>Part of update Magento 2.3.3 and 2.2.10 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> </ul> Mon, 06 Apr 2020 08:38:23 GMTMagento3891<p>The frontend cookie was not set properly for a secure configuration for logged-in user.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.2-alpha</li> </ul> Tue, 07 Apr 2020 07:17:03 GMTJetpack3961<p>Coupon exception messages were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce list</li> </ul> Thu, 09 Apr 2020 07:16:00 GMTWooCommerce3983<p>An authenticated user with privileges to the tax > notification > info_url setting in the Admin panel could embed malicious code through a stored cross-site scripting vulnerability. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Tue, 14 Apr 2020 08:10:35 GMTMagento3986<p>An authenticated user with administrative privileges could embed arbitrary code via a stored cross site scripting vulnerability in the Terms & Conditions with Checkbox Text field in the admin panel. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> </ul> Tue, 14 Apr 2020 08:10:35 GMTMagento3984<p>An authenticated user with privileges to the Currency Symbols functionality could inject malicious javascript. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 20 Apr 2020 08:10:35 GMTMagento3987<p>An attacker could access uploaded images directly by traversing to its URL without sufficient access control. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 20 Apr 2020 08:10:35 GMTMagento3989<p>An authenticated user with privileges to create newsletter or email templates could execute arbitrary code through crafted newsletter or email template code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> </ul> Tue, 21 Apr 2020 07:12:45 GMTMagento3990<p>Incorrect ACL checks in the access level section of com_users allowed the unauthorized editing/deletion of usergroups. <br> <br>CVE Number: CVE-2020-11891 / CVE-2020-11889</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> </ul> Fri, 24 Apr 2020 12:43:13 GMTJoomla3994<p>Inproper input validations in the usergroup table class could lead to a broken ACL configuration. <br> <br>CVE Number: CVE-2020-11890</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> </ul> Fri, 24 Apr 2020 12:43:13 GMTJoomla3995<p>One vulnerability allowed an unauthenticated attacker to inject malicious JavaScript into any published popup, which would then be executed whenever the popup loaded. The other vulnerability allowed any logged-in user, even those with minimal permissions such as a subscriber, to export a list of all newsletter subscribers, export system configuration information, and grant themselves access to various features of the plugin. <br> <br>CVE-2020-10196 / CVE-2020-10195</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Popup Builder by Forward Looking 3.0.5</li> <li>Popup Builder by Forward Looking 3.0.6</li> <li>Popup Builder by Forward Looking 3.0.7</li> <li>Popup Builder by Forward Looking 3.0.8</li> <li>Popup Builder by Forward Looking 3.0.9</li> <li>Popup Builder by Forward Looking 3.0.9.1</li> <li>Popup Builder by Forward Looking 3.1</li> <li>Popup Builder by Forward Looking 3.1.1</li> <li>Popup Builder by Forward Looking 3.1.2</li> <li>Popup Builder by Forward Looking 3.1.3</li> <li>Popup Builder by Forward Looking 3.1.4</li> <li>Popup Builder by Forward Looking 3.1.4.1</li> <li>Popup Builder by Forward Looking 3.1.5</li> <li>Popup Builder by Forward Looking 3.1.5.1</li> <li>Popup Builder by Forward Looking 3.1.5.2</li> <li>Popup Builder by Forward Looking 3.1.6</li> <li>Popup Builder by Forward Looking 3.1.6.1</li> <li>Popup Builder by Forward Looking 3.1.7</li> <li>Popup Builder by Forward Looking 3.1.7.1</li> <li>Popup Builder by Forward Looking 3.1.8</li> <li>Popup Builder by Forward Looking 3.1.9</li> <li>Popup Builder by Forward Looking 3.2</li> <li>Popup Builder by Forward Looking 3.3</li> <li>Popup Builder by Forward Looking 3.4</li> <li>Popup Builder by Forward Looking 3.41</li> <li>Popup Builder by Forward Looking 3.42</li> <li>Popup Builder by Forward Looking 3.43</li> <li>Popup Builder by Forward Looking 3.44</li> <li>Popup Builder by Forward Looking 3.45</li> <li>Popup Builder by Forward Looking 3.46</li> <li>Popup Builder by Forward Looking 3.47</li> <li>Popup Builder by Forward Looking 3.48</li> <li>Popup Builder by Forward Looking 3.49</li> <li>Popup Builder by Forward Looking 3.50</li> <li>Popup Builder by Forward Looking 3.51</li> <li>Popup Builder by Forward Looking 3.52</li> <li>Popup Builder by Forward Looking 3.53</li> <li>Popup Builder by Forward Looking 3.54</li> <li>Popup Builder by Forward Looking 3.55</li> <li>Popup Builder by Forward Looking 3.56</li> <li>Popup Builder by Forward Looking 3.57</li> <li>Popup Builder by Forward Looking 3.58</li> <li>Popup Builder by Forward Looking 3.59</li> <li>Popup Builder by Forward Looking 3.60</li> <li>Popup Builder by Forward Looking 3.61</li> <li>Popup Builder by Forward Looking 3.61.1</li> <li>Popup Builder by Forward Looking 3.62</li> <li>Popup Builder by Forward Looking 3.62.1</li> <li>Popup Builder by Forward Looking 3.63</li> </ul> Sat, 25 Apr 2020 14:43:52 GMTPopup Builder by Forward Looking3997<p>'Featured Category' and 'Featured Product' were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> </ul> Mon, 11 May 2020 10:02:32 GMTWooCommerce3985<p>Various parts in the shipping module were not properly escaped against XSS. </p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Tue, 12 May 2020 08:10:29 GMTMagento3991<p>Several elements in the shipping module were not properly escaped against XSS. <br> <br>PRODSECBUG-2543 - CVE-2020-3715 / PRODSECBUG-2599 - CVE-2020-3758</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Mon, 18 May 2020 08:47:48 GMTMagento3992<p>Before enqueue stylesheets used for the frontend a permission check was missing to prevent unauthenticated usage.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 3.4.2</li> </ul> Tue, 19 May 2020 07:06:52 GMTAll in One SEO Pack4025<p>Reflected XSS when uploading a wrong file.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Wed, 20 May 2020 10:22:31 GMTPrestaShop4023<p>Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. <br> <br>The vulnerability was caused by insufficient validation of the destination query parameter in the drupal_goto() function.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 7.65</li> <li>Drupal 7.66</li> <li>Drupal 7.67</li> <li>Drupal 7.68</li> <li>Drupal 7.69</li> </ul> Thu, 21 May 2020 10:27:48 GMTDrupal4029<p>The admin url for general options was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> <li>Yoast SEO 12.8</li> <li>Yoast SEO 12.8.1</li> <li>Yoast SEO 12.9</li> <li>Yoast SEO 12.9.1</li> <li>Yoast SEO 13.0</li> <li>Yoast SEO 13.1</li> <li>Yoast SEO 13.2</li> <li>Yoast SEO 13.3</li> <li>Yoast SEO 13.4</li> <li>Yoast SEO 13.5</li> <li>Yoast SEO 14.0</li> <li>Yoast SEO 14.0.1</li> <li>Yoast SEO 14.0.2</li> <li>Yoast SEO 14.0.3</li> <li>Yoast SEO 14.0.4</li> </ul> Thu, 28 May 2020 06:50:49 GMTYoast SEO4028<p>Lack of input validation in the heading tag option of the "Articles – Newsflash" and "Articles - Categories" modules allowed XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> </ul> Thu, 04 Jun 2020 13:17:05 GMTJoomla4078<p>Missing token checks in com_postinstall caused CSRF vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> </ul> Thu, 04 Jun 2020 13:17:05 GMTJoomla4077<p>Incorrect input validation of the module tag option in com_modules allowed XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> </ul> Thu, 04 Jun 2020 13:17:05 GMTJoomla4079<p>User input validation: Strictly compares to boolean _false_.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> <li>Contact Form 7 5.0.4</li> <li>Contact Form 7 5.0.5</li> <li>Contact Form 7 5.1</li> <li>Contact Form 7 5.1.1</li> <li>Contact Form 7 5.1.2</li> <li>Contact Form 7 5.1.3</li> <li>Contact Form 7 5.1.4</li> <li>Contact Form 7 5.1.5</li> <li>Contact Form 7 5.1.6</li> <li>Contact Form 7 5.1.7</li> <li>Contact Form 7 5.1.8</li> </ul> Tue, 09 Jun 2020 06:56:14 GMTContact Form 74073<p>Permission access was not properly checked to access loading cart rules.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Wed, 10 Jun 2020 08:33:22 GMTPrestaShop4074<p>Given a single gift card code, an unauthenticated user could discover an invariant used in gift card generation. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Wed, 10 Jun 2020 08:33:22 GMTMagento4075<p>The search page with alias and search parameters outputs was not properly escaped to prevent XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Wed, 10 Jun 2020 08:33:22 GMTPrestaShop4076<p>id_feature Parameter was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Wed, 10 Jun 2020 08:33:22 GMTPrestaShop4080<p>Issue where comments from password-protected posts and pages could be displayed under certain conditions.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.7.37</li> <li>WordPress 3.7.38</li> <li>WordPress 3.7.39</li> <li>WordPress 3.7.40</li> <li>WordPress 3.7.41</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.8.37</li> <li>WordPress 3.8.38</li> <li>WordPress 3.8.39</li> <li>WordPress 3.8.40</li> <li>WordPress 3.8.41</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 3.9.35</li> <li>WordPress 3.9.36</li> <li>WordPress 3.9.37</li> <li>WordPress 3.9.39</li> <li>WordPress 3.9.40</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.0.34</li> <li>WordPress 4.0.35</li> <li>WordPress 4.0.36</li> <li>WordPress 4.0.37</li> <li>WordPress 4.0.38</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.1.34</li> <li>WordPress 4.1.35</li> <li>WordPress 4.1.36</li> <li>WordPress 4.1.37</li> <li>WordPress 4.1.38</li> <li>WordPress 4.1.39</li> <li>WordPress 4.1.40</li> <li>WordPress 4.1.41</li> <li>WordPress 4.1.42</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.2.31</li> <li>WordPress 4.2.32</li> <li>WordPress 4.2.33</li> <li>WordPress 4.2.34</li> <li>WordPress 4.2.35</li> <li>WordPress 4.2.36</li> <li>WordPress 4.2.37</li> <li>WordPress 4.2.38</li> <li>WordPress 4.2.39</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.27</li> <li>WordPress 4.3.28</li> <li>WordPress 4.3.29</li> <li>WordPress 4.3.30</li> <li>WordPress 4.3.31</li> <li>WordPress 4.3.32</li> <li>WordPress 4.3.33</li> <li>WordPress 4.3.34</li> <li>WordPress 4.3.35</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.4.26</li> <li>WordPress 4.4.27</li> <li>WordPress 4.4.28</li> <li>WordPress 4.4.29</li> <li>WordPress 4.4.30</li> <li>WordPress 4.4.31</li> <li>WordPress 4.4.32</li> <li>WordPress 4.4.33</li> <li>WordPress 4.4.34</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.5.25</li> <li>WordPress 4.5.26</li> <li>WordPress 4.5.27</li> <li>WordPress 4.5.28</li> <li>WordPress 4.5.29</li> <li>WordPress 4.5.30</li> <li>WordPress 4.5.31</li> <li>WordPress 4.5.32</li> <li>WordPress 4.5.33</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.6.22</li> <li>WordPress 4.6.23</li> <li>WordPress 4.6.24</li> <li>WordPress 4.6.25</li> <li>WordPress 4.6.26</li> <li>WordPress 4.6.27</li> <li>WordPress 4.6.28</li> <li>WordPress 4.6.29</li> <li>WordPress 4.6.30</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.7.22</li> <li>WordPress 4.7.23</li> <li>WordPress 4.7.24</li> <li>WordPress 4.7.25</li> <li>WordPress 4.7.26</li> <li>WordPress 4.7.27</li> <li>WordPress 4.7.28</li> <li>WordPress 4.7.29</li> <li>WordPress 4.7.30</li> <li>WordPress 4.7.31</li> <li>WordPress 4.7.32</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.18</li> <li>WordPress 4.8.19</li> <li>WordPress 4.8.20</li> <li>WordPress 4.8.21</li> <li>WordPress 4.8.22</li> <li>WordPress 4.8.23</li> <li>WordPress 4.8.24</li> <li>WordPress 4.8.25</li> <li>WordPress 4.8.26</li> <li>WordPress 4.8.27</li> <li>WordPress 4.8.28</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 4.9.19</li> <li>WordPress 4.9.20</li> <li>WordPress 4.9.21</li> <li>WordPress 4.9.22</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.23</li> <li>WordPress 4.9.24</li> <li>WordPress 4.9.25</li> <li>WordPress 4.9.26</li> <li>WordPress 4.9.27</li> <li>WordPress 4.9.28</li> <li>WordPress 4.9.29</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 11:00:14 GMTWordPress4083<p>Open redirect issue in wp_validate_redirect().</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.27</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 11:00:14 GMTWordPress4086<p>Issue where set-screen-option could be misused by plugins leading to privilege escalation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.27</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 11:00:14 GMTWordPress4084<p>XSS issue where authenticated users with upload permissions were able to add JavaScript to media files.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 11:00:14 GMTWordPress4085<p>Unescaped variable could lead to authenticated XSS issue via theme uploads.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 11:00:14 GMTWordPress4087<p>XSS issue where authenticated users with low privileges were able to add JavaScript to posts in the block editor.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.27</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> </ul> Sat, 13 Jun 2020 20:42:13 GMTWordPress4082<p>The Drupal core Form API didn't properly handle certain form input from cross-site requests, which could lead to other vulnerabilities.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 7.65</li> <li>Drupal 7.66</li> <li>Drupal 7.67</li> <li>Drupal 7.68</li> <li>Drupal 7.69</li> <li>Drupal 7.70</li> <li>Drupal 7.71</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.9.0</li> <li>Drupal 9.0.0</li> </ul> Sat, 20 Jun 2020 09:40:27 GMTDrupal4108<p>JSON:API PATCH requests could bypass validation for certain fields. <br> <br>By default, JSON:API works in a read-only mode which makes it impossible to exploit the vulnerability. Only sites that have the read_only set to FALSE under jsonapi.settings config were vulnerable.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.9.0</li> <li>Drupal 9.0.0</li> </ul> Sat, 20 Jun 2020 09:40:27 GMTDrupal4107<p>Drupal 8 and 9 had a remote code execution vulnerability under certain circumstances. <br> <br>An attacker could trick an administrator into visiting a malicious site that could result in creating a carefully named directory on the file system. With this directory in place, an attacker could attempt to brute force a remote code execution vulnerability. <br> <br>Windows servers were most likely to be affected.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.9.0</li> <li>Drupal 9.0.0</li> </ul> Sat, 20 Jun 2020 09:40:27 GMTDrupal4109<p>Always cast integer when it's related to ids on AdminAttributesGroupsController to avoid XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Tue, 23 Jun 2020 07:05:36 GMTPrestaShop4105<p>A specific invalid value message wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> <li>Yoast SEO 12.8</li> <li>Yoast SEO 12.8.1</li> <li>Yoast SEO 12.9</li> <li>Yoast SEO 12.9.1</li> <li>Yoast SEO 13.0</li> <li>Yoast SEO 13.1</li> <li>Yoast SEO 13.2</li> <li>Yoast SEO 13.3</li> <li>Yoast SEO 13.4</li> <li>Yoast SEO 13.5</li> <li>Yoast SEO 14.0</li> <li>Yoast SEO 14.0.1</li> <li>Yoast SEO 14.0.2</li> <li>Yoast SEO 14.0.3</li> <li>Yoast SEO 14.0.4</li> <li>Yoast SEO 14.1</li> </ul> Tue, 30 Jun 2020 07:27:51 GMTYoast SEO4117<p>The extended exception message wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Thu, 02 Jul 2020 07:39:25 GMTPrestaShop4103<p>Some frontend forms and lists were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Thu, 02 Jul 2020 09:47:51 GMTMagento4119<p>Introducing type casting to avoid XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 1.6.2</li> <li>Yoast SEO 1.6.3</li> <li>Yoast SEO 1.7</li> <li>Yoast SEO 1.7.1</li> <li>Yoast SEO 2.0</li> <li>Yoast SEO 2.0.1</li> <li>Yoast SEO 2.1</li> <li>Yoast SEO 2.1.1</li> <li>Yoast SEO 2.2</li> <li>Yoast SEO 2.2.1</li> <li>Yoast SEO 2.3</li> <li>Yoast SEO 2.3.1</li> <li>Yoast SEO 2.3.2</li> <li>Yoast SEO 2.3.3</li> <li>Yoast SEO 2.3.4</li> <li>Yoast SEO 2.3.5</li> <li>Yoast SEO 3.0</li> <li>Yoast SEO 3.0.1</li> <li>Yoast SEO 3.0.2</li> <li>Yoast SEO 3.0.3</li> <li>Yoast SEO 3.0.4</li> <li>Yoast SEO 3.0.5</li> <li>Yoast SEO 3.0.6</li> <li>Yoast SEO 3.0.7</li> <li>Yoast SEO 3.1</li> <li>Yoast SEO 3.1.1</li> <li>Yoast SEO 3.1.2</li> <li>Yoast SEO 3.2</li> <li>Yoast SEO 3.2.1</li> <li>Yoast SEO 3.2.2</li> <li>Yoast SEO 3.2.3</li> <li>Yoast SEO 3.2.4</li> <li>Yoast SEO 3.2.5</li> <li>Yoast SEO 3.3.0</li> <li>Yoast SEO 3.3.1</li> <li>Yoast SEO 3.3.2</li> <li>Yoast SEO 3.3.3</li> <li>Yoast SEO 3.3.4</li> <li>Yoast SEO 3.4</li> <li>Yoast SEO 3.4.1</li> <li>Yoast SEO 3.4.2</li> <li>Yoast SEO 3.5</li> <li>Yoast SEO 3.6</li> <li>Yoast SEO 3.6.1</li> <li>Yoast SEO 3.7.0</li> <li>Yoast SEO 3.7.1</li> <li>Yoast SEO 3.8</li> <li>Yoast SEO 3.9</li> <li>Yoast SEO 4.0</li> <li>Yoast SEO 4.0.2</li> <li>Yoast SEO 4.1</li> <li>Yoast SEO 4.2</li> <li>Yoast SEO 4.2.1</li> <li>Yoast SEO 4.3</li> <li>Yoast SEO 4.4</li> <li>Yoast SEO 4.5</li> <li>Yoast SEO 4.6</li> <li>Yoast SEO 4.7</li> <li>Yoast SEO 4.7.1</li> <li>Yoast SEO 4.8</li> <li>Yoast SEO 4.9</li> <li>Yoast SEO 5.0</li> <li>Yoast SEO 5.0.1</li> <li>Yoast SEO 5.0.2</li> <li>Yoast SEO 5.1</li> <li>Yoast SEO 5.2</li> <li>Yoast SEO 5.3</li> <li>Yoast SEO 5.3.1</li> <li>Yoast SEO 5.3.2</li> <li>Yoast SEO 5.3.3</li> <li>Yoast SEO 5.4.0</li> <li>Yoast SEO 5.4.1</li> <li>Yoast SEO 5.4.2</li> <li>Yoast SEO 5.5</li> <li>Yoast SEO 5.5.1</li> <li>Yoast SEO 5.6</li> <li>Yoast SEO 5.6.1</li> <li>Yoast SEO 5.7</li> <li>Yoast SEO 5.7.1</li> <li>Yoast SEO 5.8</li> <li>Yoast SEO 5.9</li> <li>Yoast SEO 5.9.1</li> <li>Yoast SEO 5.9.2</li> <li>Yoast SEO 5.9.3</li> <li>Yoast SEO 6.0</li> <li>Yoast SEO 6.1</li> <li>Yoast SEO 6.1.1</li> <li>Yoast SEO 6.2</li> <li>Yoast SEO 6.3</li> <li>Yoast SEO 6.3.1</li> <li>Yoast SEO 7.0</li> <li>Yoast SEO 7.0.1</li> <li>Yoast SEO 7.0.2</li> <li>Yoast SEO 7.0.3</li> <li>Yoast SEO 7.1</li> <li>Yoast SEO 7.2</li> <li>Yoast SEO 7.3</li> <li>Yoast SEO 7.4</li> <li>Yoast SEO 7.4.1</li> <li>Yoast SEO 7.4.2</li> <li>Yoast SEO 7.5</li> <li>Yoast SEO 7.5.1</li> <li>Yoast SEO 7.5.3</li> <li>Yoast SEO 7.6</li> <li>Yoast SEO 7.6.1</li> <li>Yoast SEO 7.7</li> <li>Yoast SEO 7.7.1</li> <li>Yoast SEO 7.7.2</li> <li>Yoast SEO 7.7.3</li> <li>Yoast SEO 7.8</li> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> <li>Yoast SEO 12.8</li> <li>Yoast SEO 12.8.1</li> <li>Yoast SEO 12.9</li> <li>Yoast SEO 12.9.1</li> <li>Yoast SEO 13.0</li> <li>Yoast SEO 13.1</li> <li>Yoast SEO 13.2</li> <li>Yoast SEO 13.3</li> <li>Yoast SEO 13.4</li> <li>Yoast SEO 13.5</li> <li>Yoast SEO 14.0</li> <li>Yoast SEO 14.0.1</li> <li>Yoast SEO 14.0.2</li> <li>Yoast SEO 14.0.3</li> <li>Yoast SEO 14.0.4</li> <li>Yoast SEO 14.1</li> <li>Yoast SEO 14.2</li> <li>Yoast SEO 14.3</li> </ul> Thu, 09 Jul 2020 08:02:56 GMTYoast SEO4122<p>Some of the product elements weren't properly escaped against. XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Wed, 15 Jul 2020 07:54:55 GMTWooCommerce4121<p>A missing token check in the ajax_install endpoint com_installer could cause a CSRF vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4137<p>Missing validation checked at the usergroups table object could result into an broken site configuration.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4146<p>Lack of input filtering and escaping allowed XSS attacks in mod_random_image.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4138<p>Internal read-only fields in the User table class could be modified by users.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4147<p>A missing token check in the remove request section of com_privacy had caused a CSRF vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4149<p>Inadequate filtering in the system information screen could expose redis or proxy credentials</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> </ul> Fri, 17 Jul 2020 14:28:19 GMTJoomla4148<p>A range of include elements were not properly escaped to prevent XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Tue, 21 Jul 2020 13:41:43 GMTWooCommerce4123<p>An authenticated user with administrative privileges could manipulate the notification feed , which allowed an attacker to use a cross-site scripting vulnerability to embed malicious code.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Thu, 23 Jul 2020 06:41:30 GMTMagento4125<p>An authenticated user with administrative privileges could embed arbitrary code in the Conditions tab of Admin Shopping Cart Rules page. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.3.0</li> </ul> Tue, 28 Jul 2020 06:45:30 GMTMagento4128<p>An authenticated user with privileges to the Checkbox Custom Option Value field on the Admin could use a stored cross-site scripting vulnerability to embed malicious code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.3.0</li> </ul> Thu, 30 Jul 2020 07:41:16 GMTMagento4124<p>Insufficient brute force protections on promo code entry could allow an attacker to guess discount codes offered by the Magento merchant. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 10 Aug 2020 07:03:28 GMTMagento4168<p>An authenticated user with privileges to create a newsletter or email templates could execute arbitrary code through a crafted newsletter or email template code. <br> <br>Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> </ul> Thu, 13 Aug 2020 07:19:43 GMTMagento4129<p>The save tax data option wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.3.9.2</li> <li>All in One SEO Pack 2.3.10</li> <li>All in One SEO Pack 2.3.10.1</li> <li>All in One SEO Pack 2.3.10.2</li> <li>All in One SEO Pack 2.3.11</li> <li>All in One SEO Pack 2.3.11.1</li> <li>All in One SEO Pack 2.3.11.2</li> <li>All in One SEO Pack 2.3.11.3</li> <li>All in One SEO Pack 2.3.11.4</li> <li>All in One SEO Pack 2.3.12</li> <li>All in One SEO Pack 2.3.12.1</li> <li>All in One SEO Pack 2.3.12.2</li> <li>All in One SEO Pack 2.3.12.2.1</li> <li>All in One SEO Pack 2.3.12.3</li> <li>All in One SEO Pack 2.3.12.4</li> <li>All in One SEO Pack 2.3.12.5</li> <li>All in One SEO Pack 2.3.13</li> <li>All in One SEO Pack 2.3.13.1</li> <li>All in One SEO Pack 2.3.13.2</li> <li>All in One SEO Pack 2.3.14</li> <li>All in One SEO Pack 2.3.14.1</li> <li>All in One SEO Pack 2.3.14.2</li> <li>All in One SEO Pack 2.3.15</li> <li>All in One SEO Pack 2.3.15.1</li> <li>All in One SEO Pack 2.3.15.2</li> <li>All in One SEO Pack 2.3.15.3</li> <li>All in One SEO Pack 2.3.16</li> <li>All in One SEO Pack 2.4</li> <li>All in One SEO Pack 2.4.1</li> <li>All in One SEO Pack 2.4.1.1</li> <li>All in One SEO Pack 2.4.2</li> <li>All in One SEO Pack 2.4.2.1</li> <li>All in One SEO Pack 2.4.3</li> <li>All in One SEO Pack 2.4.3.1</li> <li>All in One SEO Pack 2.4.4</li> <li>All in One SEO Pack 2.4.4.1</li> <li>All in One SEO Pack 2.4.5</li> <li>All in One SEO Pack 2.4.5.1</li> <li>All in One SEO Pack 2.4.6</li> <li>All in One SEO Pack 2.4.6.1</li> <li>All in One SEO Pack 2.5</li> <li>All in One SEO Pack 2.6.1</li> <li>All in One SEO Pack 2.7.2</li> <li>All in One SEO Pack 2.7.3</li> <li>All in One SEO Pack 2.8</li> <li>All in One SEO Pack 2.9</li> <li>All in One SEO Pack 2.9.1</li> <li>All in One SEO Pack 2.9.1.1</li> <li>All in One SEO Pack 2.10</li> <li>All in One SEO Pack 2.10.1</li> <li>All in One SEO Pack 2.11</li> <li>All in One SEO Pack 2.12</li> <li>All in One SEO Pack 2.12.1</li> <li>All in One SEO Pack 3.0</li> <li>All in One SEO Pack 3.0.1</li> <li>All in One SEO Pack 3.0.2</li> <li>All in One SEO Pack 3.0.3</li> <li>All in One SEO Pack 3.0.4</li> <li>All in One SEO Pack 3.1</li> <li>All in One SEO Pack 3.1.1</li> <li>All in One SEO Pack 3.2</li> <li>All in One SEO Pack 3.2.1</li> <li>All in One SEO Pack 3.2.2</li> <li>All in One SEO Pack 3.2.3</li> <li>All in One SEO Pack 3.2.4</li> <li>All in One SEO Pack 3.2.5</li> <li>All in One SEO Pack 3.2.6</li> <li>All in One SEO Pack 3.2.7</li> <li>All in One SEO Pack 3.2.8</li> <li>All in One SEO Pack 3.2.9</li> <li>All in One SEO Pack 3.2.10</li> <li>All in One SEO Pack 3.3</li> <li>All in One SEO Pack 3.3.1</li> <li>All in One SEO Pack 3.3.1.1</li> <li>All in One SEO Pack 3.3.2</li> <li>All in One SEO Pack 3.3.3</li> <li>All in One SEO Pack 3.3.4</li> <li>All in One SEO Pack 3.3.5</li> <li>All in One SEO Pack 3.4.2</li> <li>All in One SEO Pack 3.4.3</li> <li>All in One SEO Pack 3.5.2</li> <li>All in One SEO Pack 3.6.1</li> </ul> Thu, 13 Aug 2020 07:19:43 GMTAll in One SEO Pack4171<p>The attribute name in prepare attribute wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Thu, 13 Aug 2020 07:19:43 GMTWooCommerce4170<p>The updated quick edit value wasn't properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 3.4.2</li> <li>All in One SEO Pack 3.4.3</li> <li>All in One SEO Pack 3.5.2</li> <li>All in One SEO Pack 3.6.1</li> </ul> Thu, 13 Aug 2020 07:19:43 GMTAll in One SEO Pack4172<p>The item name, get SKU and add to cart parts weren't properly escaped against XSS. <br> <br>Part of Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> </ul> Thu, 20 Aug 2020 09:37:16 GMTMagento4169<p>Lack of escaping in mod_latestactions allowed XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> </ul> Thu, 27 Aug 2020 10:08:10 GMTJoomla4184<p>Lack of input validation in com_content lead to an open redirect.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> </ul> Thu, 27 Aug 2020 10:08:10 GMTJoomla4185<p>Several values in advance searching were not properly escaped against XSS. <br> <br>Part of update 2.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 01 Sep 2020 07:35:45 GMTMagento4181<p>Title of the sign up label of the action alert was not properly escaped against XSS. <br> <br>Part of update 2.3.4.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Thu, 03 Sep 2020 09:54:34 GMTMagento4180<p>The meta box expand message wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> <li>Yoast SEO 12.8</li> <li>Yoast SEO 12.8.1</li> <li>Yoast SEO 12.9</li> <li>Yoast SEO 12.9.1</li> <li>Yoast SEO 13.0</li> <li>Yoast SEO 13.1</li> <li>Yoast SEO 13.2</li> <li>Yoast SEO 13.3</li> <li>Yoast SEO 13.4</li> <li>Yoast SEO 13.5</li> <li>Yoast SEO 14.0</li> <li>Yoast SEO 14.0.1</li> <li>Yoast SEO 14.0.2</li> <li>Yoast SEO 14.0.3</li> <li>Yoast SEO 14.0.4</li> <li>Yoast SEO 14.1</li> <li>Yoast SEO 14.2</li> <li>Yoast SEO 14.3</li> <li>Yoast SEO 14.4</li> <li>Yoast SEO 14.4.1</li> <li>Yoast SEO 14.5</li> <li>Yoast SEO 14.6</li> <li>Yoast SEO 14.6.1</li> <li>Yoast SEO 14.7</li> </ul> Thu, 10 Sep 2020 08:01:02 GMTYoast SEO4188<p>If a target sends a corrupted file, it leads to a reflected XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> </ul> Mon, 14 Sep 2020 07:02:35 GMTPrestaShop4183<p>Drupal core's built-in CKEditor image caption functionality was vulnerable to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> </ul> Sun, 20 Sep 2020 14:10:23 GMTDrupal4200<p>The Workspaces module didn't sufficiently check access permissions when switching workspaces, leading to an access bypass vulnerability. An attacker could be able to see content before the site owner intends people to see the content.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> </ul> Sun, 20 Sep 2020 14:10:23 GMTDrupal4198<p>A vulnerability existed in the File module which allowed an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the ID of the file.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> </ul> Sun, 20 Sep 2020 14:10:23 GMTDrupal4197<p>The Drupal AJAX API did not disable JSONP by default, which could lead to cross-site scripting.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> </ul> Sun, 20 Sep 2020 14:10:23 GMTDrupal4201<p>An attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> </ul> Mon, 21 Sep 2020 14:59:10 GMTDrupal4199<p>To make sure trailing forward slashes and backslashes removed if they exist in case of sm_b_baseurl and/or sm_b_style.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Google XML Sitemaps 4.0.5</li> <li>Google XML Sitemaps 4.0.6</li> <li>Google XML Sitemaps 4.0.7</li> <li>Google XML Sitemaps 4.0.7.1</li> <li>Google XML Sitemaps 4.0.8</li> <li>Google XML Sitemaps 4.0.9</li> <li>Google XML Sitemaps 4.1.0</li> </ul> Tue, 22 Sep 2020 08:57:33 GMTGoogle XML Sitemaps4190<p>The impacts could be many, and vary from the theft of information and credentials to the redirection to malicious websites containing attacker-controlled content, which in some cases even caused XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it could have been severe in case it was exploitable.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Mon, 28 Sep 2020 09:49:22 GMTPrestaShop4189<p>Several parts in opengraph weren't properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.3.9.2</li> <li>All in One SEO Pack 2.3.10</li> <li>All in One SEO Pack 2.3.10.1</li> <li>All in One SEO Pack 2.3.10.2</li> <li>All in One SEO Pack 2.3.11</li> <li>All in One SEO Pack 2.3.11.1</li> <li>All in One SEO Pack 2.3.11.2</li> <li>All in One SEO Pack 2.3.11.3</li> <li>All in One SEO Pack 2.3.11.4</li> <li>All in One SEO Pack 2.3.12</li> <li>All in One SEO Pack 2.3.12.1</li> <li>All in One SEO Pack 2.3.12.2</li> <li>All in One SEO Pack 2.3.12.2.1</li> <li>All in One SEO Pack 2.3.12.3</li> <li>All in One SEO Pack 2.3.12.4</li> <li>All in One SEO Pack 2.3.12.5</li> <li>All in One SEO Pack 2.3.13</li> <li>All in One SEO Pack 2.3.13.1</li> <li>All in One SEO Pack 2.3.13.2</li> <li>All in One SEO Pack 2.3.14</li> <li>All in One SEO Pack 2.3.14.1</li> <li>All in One SEO Pack 2.3.14.2</li> <li>All in One SEO Pack 2.3.15</li> <li>All in One SEO Pack 2.3.15.1</li> <li>All in One SEO Pack 2.3.15.2</li> <li>All in One SEO Pack 2.3.15.3</li> <li>All in One SEO Pack 2.3.16</li> <li>All in One SEO Pack 2.4</li> <li>All in One SEO Pack 2.4.1</li> <li>All in One SEO Pack 2.4.1.1</li> <li>All in One SEO Pack 2.4.2</li> <li>All in One SEO Pack 2.4.2.1</li> <li>All in One SEO Pack 2.4.3</li> <li>All in One SEO Pack 2.4.3.1</li> <li>All in One SEO Pack 2.4.4</li> <li>All in One SEO Pack 2.4.4.1</li> <li>All in One SEO Pack 2.4.5</li> <li>All in One SEO Pack 2.4.5.1</li> <li>All in One SEO Pack 2.4.6</li> <li>All in One SEO Pack 2.4.6.1</li> <li>All in One SEO Pack 2.5</li> <li>All in One SEO Pack 2.6.1</li> <li>All in One SEO Pack 2.7.2</li> <li>All in One SEO Pack 2.7.3</li> <li>All in One SEO Pack 2.8</li> <li>All in One SEO Pack 2.9</li> <li>All in One SEO Pack 2.9.1</li> <li>All in One SEO Pack 2.9.1.1</li> <li>All in One SEO Pack 2.10</li> <li>All in One SEO Pack 2.10.1</li> <li>All in One SEO Pack 2.11</li> <li>All in One SEO Pack 2.12</li> <li>All in One SEO Pack 2.12.1</li> <li>All in One SEO Pack 3.0</li> <li>All in One SEO Pack 3.0.1</li> <li>All in One SEO Pack 3.0.2</li> <li>All in One SEO Pack 3.0.3</li> <li>All in One SEO Pack 3.0.4</li> <li>All in One SEO Pack 3.1</li> <li>All in One SEO Pack 3.1.1</li> <li>All in One SEO Pack 3.2</li> <li>All in One SEO Pack 3.2.1</li> <li>All in One SEO Pack 3.2.2</li> <li>All in One SEO Pack 3.2.3</li> <li>All in One SEO Pack 3.2.4</li> <li>All in One SEO Pack 3.2.5</li> <li>All in One SEO Pack 3.2.6</li> <li>All in One SEO Pack 3.2.7</li> <li>All in One SEO Pack 3.2.8</li> <li>All in One SEO Pack 3.2.9</li> <li>All in One SEO Pack 3.2.10</li> <li>All in One SEO Pack 3.3</li> <li>All in One SEO Pack 3.3.1</li> <li>All in One SEO Pack 3.3.1.1</li> <li>All in One SEO Pack 3.3.2</li> <li>All in One SEO Pack 3.3.3</li> <li>All in One SEO Pack 3.3.4</li> <li>All in One SEO Pack 3.3.5</li> <li>All in One SEO Pack 3.4.2</li> <li>All in One SEO Pack 3.4.3</li> <li>All in One SEO Pack 3.5.2</li> <li>All in One SEO Pack 3.6.1</li> <li>All in One SEO Pack 3.6.2</li> </ul> Mon, 28 Sep 2020 09:49:22 GMTAll in One SEO Pack4196<p>An authenticated user with marketing manipulation privileges could invoke methods that alter data of the underlying model followed by corresponding database modifications. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 28 Sep 2020 09:49:22 GMTMagento4205<p>The onclick confirmation link wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> </ul> Thu, 01 Oct 2020 07:38:14 GMTPrestaShop4209<p>The coupon code was not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Tue, 06 Oct 2020 09:28:54 GMTWooCommerce4214<p>Shop coupon wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Wed, 07 Oct 2020 13:57:46 GMTWooCommerce4215<p>The id of the coupon code wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Thu, 08 Oct 2020 08:11:00 GMTWooCommerce4216<p>An authenticated user with marketing manipulation privileges could invoke methods that alter data of the underlying model followed by corresponding database modifications. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 12 Oct 2020 07:23:37 GMTMagento4217<p>The description wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 2.3.9.2</li> <li>All in One SEO Pack 2.3.10</li> <li>All in One SEO Pack 2.3.10.1</li> <li>All in One SEO Pack 2.3.10.2</li> <li>All in One SEO Pack 2.3.11</li> <li>All in One SEO Pack 2.3.11.1</li> <li>All in One SEO Pack 2.3.11.2</li> <li>All in One SEO Pack 2.3.11.3</li> <li>All in One SEO Pack 2.3.11.4</li> <li>All in One SEO Pack 2.3.12</li> <li>All in One SEO Pack 2.3.12.1</li> <li>All in One SEO Pack 2.3.12.2</li> <li>All in One SEO Pack 2.3.12.2.1</li> <li>All in One SEO Pack 2.3.12.3</li> <li>All in One SEO Pack 2.3.12.4</li> <li>All in One SEO Pack 2.3.12.5</li> <li>All in One SEO Pack 2.3.13</li> <li>All in One SEO Pack 2.3.13.1</li> <li>All in One SEO Pack 2.3.13.2</li> <li>All in One SEO Pack 2.3.14</li> <li>All in One SEO Pack 2.3.14.1</li> <li>All in One SEO Pack 2.3.14.2</li> <li>All in One SEO Pack 2.3.15</li> <li>All in One SEO Pack 2.3.15.1</li> <li>All in One SEO Pack 2.3.15.2</li> <li>All in One SEO Pack 2.3.15.3</li> <li>All in One SEO Pack 2.3.16</li> <li>All in One SEO Pack 2.4</li> <li>All in One SEO Pack 2.4.1</li> <li>All in One SEO Pack 2.4.1.1</li> <li>All in One SEO Pack 2.4.2</li> <li>All in One SEO Pack 2.4.2.1</li> <li>All in One SEO Pack 2.4.3</li> <li>All in One SEO Pack 2.4.3.1</li> <li>All in One SEO Pack 2.4.4</li> <li>All in One SEO Pack 2.4.4.1</li> <li>All in One SEO Pack 2.4.5</li> <li>All in One SEO Pack 2.4.5.1</li> <li>All in One SEO Pack 2.4.6</li> <li>All in One SEO Pack 2.4.6.1</li> <li>All in One SEO Pack 2.5</li> <li>All in One SEO Pack 2.6.1</li> <li>All in One SEO Pack 2.7.2</li> <li>All in One SEO Pack 2.7.3</li> <li>All in One SEO Pack 2.8</li> <li>All in One SEO Pack 2.9</li> <li>All in One SEO Pack 2.9.1</li> <li>All in One SEO Pack 2.9.1.1</li> <li>All in One SEO Pack 2.10</li> <li>All in One SEO Pack 2.10.1</li> <li>All in One SEO Pack 2.11</li> <li>All in One SEO Pack 2.12</li> <li>All in One SEO Pack 2.12.1</li> <li>All in One SEO Pack 3.0</li> <li>All in One SEO Pack 3.0.1</li> <li>All in One SEO Pack 3.0.2</li> <li>All in One SEO Pack 3.0.3</li> <li>All in One SEO Pack 3.0.4</li> <li>All in One SEO Pack 3.1</li> <li>All in One SEO Pack 3.1.1</li> <li>All in One SEO Pack 3.2</li> <li>All in One SEO Pack 3.2.1</li> <li>All in One SEO Pack 3.2.2</li> <li>All in One SEO Pack 3.2.3</li> <li>All in One SEO Pack 3.2.4</li> <li>All in One SEO Pack 3.2.5</li> <li>All in One SEO Pack 3.2.6</li> <li>All in One SEO Pack 3.2.7</li> <li>All in One SEO Pack 3.2.8</li> <li>All in One SEO Pack 3.2.9</li> <li>All in One SEO Pack 3.2.10</li> <li>All in One SEO Pack 3.3</li> <li>All in One SEO Pack 3.3.1</li> <li>All in One SEO Pack 3.3.1.1</li> <li>All in One SEO Pack 3.3.2</li> <li>All in One SEO Pack 3.3.3</li> <li>All in One SEO Pack 3.3.4</li> <li>All in One SEO Pack 3.3.5</li> <li>All in One SEO Pack 3.4.2</li> <li>All in One SEO Pack 3.4.3</li> <li>All in One SEO Pack 3.5.2</li> <li>All in One SEO Pack 3.6.1</li> <li>All in One SEO Pack 3.6.2</li> <li>All in One SEO Pack 3.7.0</li> </ul> Thu, 15 Oct 2020 14:40:17 GMTAll in One SEO Pack4224<p>Sidebar and shop page weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Yoast SEO 7.9</li> <li>Yoast SEO 7.9.1</li> <li>Yoast SEO 8.0</li> <li>Yoast SEO 8.1</li> <li>Yoast SEO 8.1.1</li> <li>Yoast SEO 8.1.2</li> <li>Yoast SEO 8.2</li> <li>Yoast SEO 8.2.1</li> <li>Yoast SEO 8.3</li> <li>Yoast SEO 8.4</li> <li>Yoast SEO 9.0</li> <li>Yoast SEO 9.0.1</li> <li>Yoast SEO 9.0.2</li> <li>Yoast SEO 9.0.3</li> <li>Yoast SEO 9.1</li> <li>Yoast SEO 9.2</li> <li>Yoast SEO 9.2.1</li> <li>Yoast SEO 9.3</li> <li>Yoast SEO 9.4</li> <li>Yoast SEO 9.5</li> <li>Yoast SEO 9.6</li> <li>Yoast SEO 9.7</li> <li>Yoast SEO 10.0</li> <li>Yoast SEO 10.0.1</li> <li>Yoast SEO 10.1</li> <li>Yoast SEO 10.1.1</li> <li>Yoast SEO 10.1.2</li> <li>Yoast SEO 10.1.3</li> <li>Yoast SEO 11.0</li> <li>Yoast SEO 11.1</li> <li>Yoast SEO 11.1.1</li> <li>Yoast SEO 11.2</li> <li>Yoast SEO 11.2.1</li> <li>Yoast SEO 11.3</li> <li>Yoast SEO 11.4</li> <li>Yoast SEO 11.5</li> <li>Yoast SEO 11.6</li> <li>Yoast SEO 11.7</li> <li>Yoast SEO 11.8</li> <li>Yoast SEO 11.9</li> <li>Yoast SEO 12.0</li> <li>Yoast SEO 12.1</li> <li>Yoast SEO 12.2</li> <li>Yoast SEO 12.3</li> <li>Yoast SEO 12.4</li> <li>Yoast SEO 12.5</li> <li>Yoast SEO 12.5.1</li> <li>Yoast SEO 12.6</li> <li>Yoast SEO 12.6.1</li> <li>Yoast SEO 12.6.2</li> <li>Yoast SEO 12.7</li> <li>Yoast SEO 12.7.1</li> <li>Yoast SEO 12.8</li> <li>Yoast SEO 12.8.1</li> <li>Yoast SEO 12.9</li> <li>Yoast SEO 12.9.1</li> <li>Yoast SEO 13.0</li> <li>Yoast SEO 13.1</li> <li>Yoast SEO 13.2</li> <li>Yoast SEO 13.3</li> <li>Yoast SEO 13.4</li> <li>Yoast SEO 13.5</li> <li>Yoast SEO 14.0</li> <li>Yoast SEO 14.0.1</li> <li>Yoast SEO 14.0.2</li> <li>Yoast SEO 14.0.3</li> <li>Yoast SEO 14.0.4</li> <li>Yoast SEO 14.1</li> <li>Yoast SEO 14.2</li> <li>Yoast SEO 14.3</li> <li>Yoast SEO 14.4</li> <li>Yoast SEO 14.4.1</li> <li>Yoast SEO 14.5</li> <li>Yoast SEO 14.6</li> <li>Yoast SEO 14.6.1</li> <li>Yoast SEO 14.7</li> <li>Yoast SEO 14.8</li> <li>Yoast SEO 14.8.1</li> <li>Yoast SEO 14.9</li> </ul> Tue, 20 Oct 2020 09:05:46 GMTYoast SEO4227<p>Missing permission checks could lead to unauthorized usage in the admin section through the API.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Mon, 26 Oct 2020 09:44:51 GMTPrestaShop4191<p>PRODSECBUG-2337: A stored cross-site scripting vulnerability existed in the product catalog form. This could be exploited by an authenticated user with privileges to the product catalog to inject malicious javascript. <br> <br>PRODSECBUG-2307: Insufficient enforcement of user access controls could be abused by a low-privileged user to make unauthorized environment configuration changes, such as removing security controls. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 2/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Mon, 26 Oct 2020 09:44:51 GMTMagento4210<p>Newsletter subscription wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 26 Oct 2020 09:44:51 GMTMagento4235<p>Purchase order wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Thu, 29 Oct 2020 09:09:36 GMTMagento4233<p>Requests for a specific file path could have resulted in a redirect to the URL of the Magento admin panel, disclosed its location to potentially unauthorized parties. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Thu, 29 Oct 2020 09:09:36 GMTMagento4234<p>[XML-RPC] Improve error messages for unprivileged users <br>Add specific permission checks to avoid ambiguous failure messages. <br> <br>[XML-RPC] Fix length validation of anonymous commenter's email address <br>Fix the first step of validating an anonymous commenters in which the length is checked prior to running regular expressions. <br> <br>[XML-RPC] Return error message if attachment ID is incorrect <br>Throw an error for incorrect attachment IDs when requesting a media object to ensure return signature is correct and doesn't include incorrectly typed values within the object.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> </ul> Tue, 03 Nov 2020 21:35:26 GMTWordPress4243<p>Access to isFree table in admin section wasn't properly checked.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> </ul> Thu, 12 Nov 2020 09:50:39 GMTPrestaShop4236<p>Meta box data wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Tue, 17 Nov 2020 10:04:42 GMTWooCommerce4257<p>An attacker was able to list all the orders placed on the website without being logged by abusing the function that allowed a shopping cart to be recreated from an order already placed.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> </ul> Wed, 18 Nov 2020 11:21:51 GMTPrestaShop4260<p>Drupal core did not properly sanitize certain filenames on uploaded files, which could lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 7.65</li> <li>Drupal 7.66</li> <li>Drupal 7.67</li> <li>Drupal 7.68</li> <li>Drupal 7.69</li> <li>Drupal 7.70</li> <li>Drupal 7.71</li> <li>Drupal 7.72</li> <li>Drupal 7.73</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> </ul> Sat, 21 Nov 2020 11:34:21 GMTDrupal4263<p>Several sections in admin controllers and send mail were not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> </ul> Mon, 23 Nov 2020 10:33:24 GMTPrestaShop4238<p>Blind SQLi in the catalog product edition page with location parameter.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> </ul> Mon, 23 Nov 2020 10:33:24 GMTPrestaShop4258<p>Resource tree template wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 24 Nov 2020 10:12:04 GMTMagento4261<p>The autosuggestion feature of com_finder did not respect the access level of the corresponding terms.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4280<p>Improper filter blacklist configuration lead to a SQL injection vulnerability in the backend user list.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4281<p>Improper handling of the username leads to a user enumeration attack vector in the backend login page.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4279<p>A missing token check in the email export feature of com_privacy caused a CSRF vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4278<p>The globlal configuration page did not remove secrets from the HTML output, disclosing the current values.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4282<p>Lack of input validation while handling ACL rulesets could caused write ACL violations.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> </ul> Sun, 29 Nov 2020 13:52:14 GMTJoomla4283<p>Lack of input validation while handling ACL rulesets could caused write ACL violations</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> </ul> Mon, 30 Nov 2020 17:34:32 GMTJoomla4288<p>Insufficient enforcement of user access controls could be abused by a low-privileged user to make unauthorized environment configuration changes, such as removing security controls. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 1/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Thu, 03 Dec 2020 09:59:32 GMTMagento4259<p>Inadequate validation could lead to the disclosure of product names even if marked as disabled. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> </ul> Wed, 09 Dec 2020 11:47:26 GMTMagento4256<p>Some fields in labels weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Wed, 09 Dec 2020 11:47:26 GMTWooCommerce4290<p>Utilizing this vulnerability, a form submitter could bypass Contact Form 7’s filename sanitization, and upload a file which could be executed as a script file on the host server.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 3.5.3</li> <li>Contact Form 7 3.5.4</li> <li>Contact Form 7 3.6</li> <li>Contact Form 7 3.7</li> <li>Contact Form 7 3.7.1</li> <li>Contact Form 7 3.7.2</li> <li>Contact Form 7 3.8</li> <li>Contact Form 7 3.8.1</li> <li>Contact Form 7 3.9</li> <li>Contact Form 7 3.9.1</li> <li>Contact Form 7 3.9.2</li> <li>Contact Form 7 3.9.3</li> <li>Contact Form 7 3.9-beta</li> <li>Contact Form 7 4.0</li> <li>Contact Form 7 4.0.1</li> <li>Contact Form 7 4.0.2</li> <li>Contact Form 7 4.0.3</li> <li>Contact Form 7 4.1</li> <li>Contact Form 7 4.1.1</li> <li>Contact Form 7 4.1.2</li> <li>Contact Form 7 4.1-beta</li> <li>Contact Form 7 4.2</li> <li>Contact Form 7 4.2.1</li> <li>Contact Form 7 4.2.2</li> <li>Contact Form 7 4.2-beta</li> <li>Contact Form 7 4.3</li> <li>Contact Form 7 4.3.1</li> <li>Contact Form 7 4.4</li> <li>Contact Form 7 4.4.1</li> <li>Contact Form 7 4.4.2</li> <li>Contact Form 7 4.5</li> <li>Contact Form 7 4.5.1</li> <li>Contact Form 7 4.6</li> <li>Contact Form 7 4.6.1</li> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> <li>Contact Form 7 5.0.4</li> <li>Contact Form 7 5.0.5</li> <li>Contact Form 7 5.1</li> <li>Contact Form 7 5.1.1</li> <li>Contact Form 7 5.1.2</li> <li>Contact Form 7 5.1.3</li> <li>Contact Form 7 5.1.4</li> <li>Contact Form 7 5.1.5</li> <li>Contact Form 7 5.1.6</li> <li>Contact Form 7 5.1.7</li> <li>Contact Form 7 5.1.8</li> <li>Contact Form 7 5.1.9</li> <li>Contact Form 7 5.2</li> <li>Contact Form 7 5.2.1</li> <li>Contact Form 7 5.2.2</li> <li>Contact Form 7 5.3</li> <li>Contact Form 7 5.3.1</li> </ul> Fri, 18 Dec 2020 13:15:40 GMTContact Form 74301<p>The string in save translate wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> </ul> Tue, 05 Jan 2021 08:27:04 GMTMagento4303<p>The port number during sign request wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> </ul> Wed, 06 Jan 2021 09:18:07 GMTJetpack4298<p>Several elements in partners and extensions weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Tue, 12 Jan 2021 11:17:56 GMTMagento4299<p>Lack of ACL checks in the orderPosition endpoint of com_modules leaked names of unpublished and/or inaccessible modules. <br> <br>CVE-2021-23123</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> </ul> Fri, 15 Jan 2021 15:09:49 GMTJoomla4308<p>Lack of escaping in mod_breadcrumbs aria-label attribute allowed XSS attacks. <br> <br>CVE-2021-23124</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> </ul> Fri, 15 Jan 2021 15:09:49 GMTJoomla4306<p>Lack of escaping of image-related parameters in multiple com_tags views cause lead to XSS attack vectors. <br> <br>CVE-2021-23125</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> </ul> Fri, 15 Jan 2021 15:09:49 GMTJoomla4307<p>Escape special regex characters inside the replacement string to prevent XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 4.0.6</li> <li>All in One SEO Pack 4.0.7</li> </ul> Mon, 18 Jan 2021 09:22:24 GMTAll in One SEO Pack4304<p>Product name and quantity weren't properly escaped against XSS. <br> <br>Part of update Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Tue, 19 Jan 2021 12:30:42 GMTMagento4292<p>Website verification services wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> </ul> Wed, 20 Jan 2021 12:47:08 GMTJetpack4044<p>An authenticated user with administrative privileges for the import feature could execute arbitrary code through a race condition that allowed webserver configuration file modification. <br> <br>Part of update SUPEE-11219</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> </ul> Mon, 25 Jan 2021 09:57:10 GMTMagento4305<p>An authenticated user with administrative privileges to import features could execute arbitrary code through a crafted configuration archive file upload. <br> <br>Part of update SUPEE-11219</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> </ul> Tue, 26 Jan 2021 10:21:40 GMTMagento4311<p>Test if it's a correct url before continue.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> </ul> Thu, 04 Feb 2021 12:13:17 GMTPrestaShop4106<p>Remove unwanted update in dashboard controller.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.1</li> <li>PrestaShop 1.6.0.1 alpha 1</li> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> </ul> Thu, 04 Feb 2021 12:13:17 GMTPrestaShop4182<p>Data linked products weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Thu, 04 Feb 2021 12:13:17 GMTWooCommerce4310<p>An authenticated user with limited administrative privileges could inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template. <br> <br>Part of update SUPEE-11219</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> </ul> Thu, 04 Feb 2021 12:13:17 GMTMagento4313<p>The lack of authorization resulted in multiple vulnerabilities such as the ability to send out newsletters with custom content, local file inclusion, deleting and importing subscribers, and more.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Popup Builder by Forward Looking 3.0.5</li> <li>Popup Builder by Forward Looking 3.0.6</li> <li>Popup Builder by Forward Looking 3.0.7</li> <li>Popup Builder by Forward Looking 3.0.8</li> <li>Popup Builder by Forward Looking 3.0.9</li> <li>Popup Builder by Forward Looking 3.0.9.1</li> <li>Popup Builder by Forward Looking 3.1</li> <li>Popup Builder by Forward Looking 3.1.1</li> <li>Popup Builder by Forward Looking 3.1.2</li> <li>Popup Builder by Forward Looking 3.1.3</li> <li>Popup Builder by Forward Looking 3.1.4</li> <li>Popup Builder by Forward Looking 3.1.4.1</li> <li>Popup Builder by Forward Looking 3.1.5</li> <li>Popup Builder by Forward Looking 3.1.5.1</li> <li>Popup Builder by Forward Looking 3.1.5.2</li> <li>Popup Builder by Forward Looking 3.1.6</li> <li>Popup Builder by Forward Looking 3.1.6.1</li> <li>Popup Builder by Forward Looking 3.1.7</li> <li>Popup Builder by Forward Looking 3.1.7.1</li> <li>Popup Builder by Forward Looking 3.1.8</li> <li>Popup Builder by Forward Looking 3.1.9</li> <li>Popup Builder by Forward Looking 3.2</li> <li>Popup Builder by Forward Looking 3.3</li> <li>Popup Builder by Forward Looking 3.4</li> <li>Popup Builder by Forward Looking 3.7</li> <li>Popup Builder by Forward Looking 3.7.1</li> <li>Popup Builder by Forward Looking 3.41</li> <li>Popup Builder by Forward Looking 3.42</li> <li>Popup Builder by Forward Looking 3.43</li> <li>Popup Builder by Forward Looking 3.44</li> <li>Popup Builder by Forward Looking 3.45</li> <li>Popup Builder by Forward Looking 3.46</li> <li>Popup Builder by Forward Looking 3.47</li> <li>Popup Builder by Forward Looking 3.48</li> <li>Popup Builder by Forward Looking 3.49</li> <li>Popup Builder by Forward Looking 3.50</li> <li>Popup Builder by Forward Looking 3.51</li> <li>Popup Builder by Forward Looking 3.52</li> <li>Popup Builder by Forward Looking 3.53</li> <li>Popup Builder by Forward Looking 3.54</li> <li>Popup Builder by Forward Looking 3.55</li> <li>Popup Builder by Forward Looking 3.56</li> <li>Popup Builder by Forward Looking 3.57</li> <li>Popup Builder by Forward Looking 3.58</li> <li>Popup Builder by Forward Looking 3.59</li> <li>Popup Builder by Forward Looking 3.60</li> <li>Popup Builder by Forward Looking 3.61</li> <li>Popup Builder by Forward Looking 3.61.1</li> <li>Popup Builder by Forward Looking 3.62</li> <li>Popup Builder by Forward Looking 3.62.1</li> <li>Popup Builder by Forward Looking 3.63</li> <li>Popup Builder by Forward Looking 3.64</li> <li>Popup Builder by Forward Looking 3.64.1</li> <li>Popup Builder by Forward Looking 3.65</li> <li>Popup Builder by Forward Looking 3.65.1</li> <li>Popup Builder by Forward Looking 3.65.2</li> <li>Popup Builder by Forward Looking 3.66</li> <li>Popup Builder by Forward Looking 3.67</li> <li>Popup Builder by Forward Looking 3.68.1</li> <li>Popup Builder by Forward Looking 3.68.2</li> <li>Popup Builder by Forward Looking 3.68.3</li> <li>Popup Builder by Forward Looking 3.68.4</li> <li>Popup Builder by Forward Looking 3.68.5</li> <li>Popup Builder by Forward Looking 3.68.5.1</li> <li>Popup Builder by Forward Looking 3.68.5.2</li> <li>Popup Builder by Forward Looking 3.69</li> <li>Popup Builder by Forward Looking 3.69.1</li> <li>Popup Builder by Forward Looking 3.69.2</li> <li>Popup Builder by Forward Looking 3.69.3</li> <li>Popup Builder by Forward Looking 3.69.4</li> <li>Popup Builder by Forward Looking 3.69.5</li> <li>Popup Builder by Forward Looking 3.69.6</li> <li>Popup Builder by Forward Looking 3.71</li> <li>Popup Builder by Forward Looking 3.72</li> </ul> Sat, 06 Feb 2021 16:59:05 GMTPopup Builder by Forward Looking4346<p>Regular expression list for JavaScript attributes and HTML tags were missing elements.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> </ul> Mon, 08 Feb 2021 09:07:03 GMTMagento4315<p>An Insecure Direct Object Reference (IDOR) vulnerability in the order processing workflow could lead to unauthorized access to order details. <br> <br>Part of update Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> </ul> Mon, 22 Feb 2021 07:32:47 GMTMagento4291<p>Several elements in frontend customer templates weren't properly escaped against XSS. <br> <br>Part of update Magento 2.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 23 Feb 2021 12:25:36 GMTMagento4353<p>Several elements in frontend customer templates weren't properly escaped against XSS. <br> <br>Part of update Magento 2.3.4</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> </ul> Thu, 25 Feb 2021 10:01:00 GMTMagento4354<p>Missing filtering of messages showed to users that could lead to xss issues. <br> <br>CVE-2021-23129</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4359<p>Extracting a specially crafted zip package could write files outside of the intended path. <br> <br>CVE-2021-26028</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4360<p>Inadequate filtering of form contents could allow to overwrite the author field. The affected core components were com_fields, com_categories, com_banners, com_contact, com_newsfeeds and com_tags. <br> <br>CVE-2021-26029</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4358<p>Missing filtering of feed fields could lead to xss issues. <br> <br>CVE-2021-23130</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4362<p>Incorrect ACL checks could allow unauthorized change of the category for an article. <br> <br>CVE-2021-26027</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4361<p>There was usage of the insecure rand() function within the process of generating the 2FA secret. <br> <br>There was usage of an insufficient length for the 2FA secret according to RFC 4226 of 10 bytes vs 20 bytes. <br> <br>CVE-2021-23126, CVE-2021-23127</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4365<p>The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implementation. That has now been replaced with a call to "random_bytes()" and its backport that is shipped within random_compat. <br> <br>CVE-2021-23128</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4366<p>Missing input validation within the template manager. <br> <br>CVE-2021-23131</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4364<p>com_media allowed paths that were not intended for image uploads. <br> <br>CVE-2021-23132</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> </ul> Mon, 08 Mar 2021 14:13:32 GMTJoomla4363<p>Logging out wasn't clearing the session properly. Therefore delete session is added to soft logout to avoid unauthenticated actions.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> <li>PrestaShop 1.7.6.9</li> <li>PrestaShop 1.7.7.0</li> <li>PrestaShop 1.7.7.0 beta 2</li> <li>PrestaShop 1.7.7.0 RC 1</li> <li>PrestaShop 1.7.7.1</li> </ul> Mon, 15 Mar 2021 09:42:07 GMTPrestaShop4387<p>The content of the CSV file wasn't properly escaped to prevent XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> <li>PrestaShop 1.7.6.9</li> <li>PrestaShop 1.7.7.0</li> <li>PrestaShop 1.7.7.0 beta 1</li> <li>PrestaShop 1.7.7.0 beta 2</li> <li>PrestaShop 1.7.7.0 RC 1</li> <li>PrestaShop 1.7.7.1</li> </ul> Tue, 16 Mar 2021 09:22:03 GMTPrestaShop4386<p>Missing path checks could allow an adversary to upload and execute malicious code with the goal of gaining control of the site.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WP Supercache 1.4.5</li> <li>WP Supercache 1.4.6</li> <li>WP Supercache 1.4.7</li> <li>WP Supercache 1.4.8</li> <li>WP Supercache 1.4.9</li> <li>WP Supercache 1.5.0</li> <li>WP Supercache 1.5.1</li> <li>WP Supercache 1.5.2</li> <li>WP Supercache 1.5.3</li> <li>WP Supercache 1.5.4</li> <li>WP Supercache 1.5.5</li> <li>WP Supercache 1.5.6</li> <li>WP Supercache 1.5.7</li> <li>WP Supercache 1.5.7.1</li> <li>WP Supercache 1.5.8</li> <li>WP Supercache 1.5.9</li> <li>WP Supercache 1.6.0</li> <li>WP Supercache 1.6.1</li> <li>WP Supercache 1.6.2</li> <li>WP Supercache 1.6.3</li> <li>WP Supercache 1.6.4</li> <li>WP Supercache 1.6.5</li> <li>WP Supercache 1.6.6</li> <li>WP Supercache 1.6.7</li> <li>WP Supercache 1.6.8</li> <li>WP Supercache 1.6.9</li> <li>WP Supercache 1.7.0</li> <li>WP Supercache 1.7.1</li> </ul> Sat, 20 Mar 2021 17:29:29 GMTWP Supercache4391<p>A range of common features weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 4.0.6</li> <li>All in One SEO Pack 4.0.7</li> <li>All in One SEO Pack 4.0.8</li> <li>All in One SEO Pack 4.0.9</li> <li>All in One SEO Pack 4.0.10</li> <li>All in One SEO Pack 4.0.12</li> <li>All in One SEO Pack 4.0.15</li> </ul> Thu, 25 Mar 2021 13:26:57 GMTAll in One SEO Pack4388<p>Several items in the sales module weren't properly escaped against XSS. <br> <br>PRODSECBUG-2543/2599 / CVE-2020-3715/3758 <br> <br>Part of update Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 29 Mar 2021 08:14:13 GMTMagento4389<p>To make sure post data for shared and side bar wishlist is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Tue, 30 Mar 2021 11:28:29 GMTMagento4355<p>To make sure post data for widget viewed and list is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Thu, 08 Apr 2021 13:38:18 GMTMagento4390<p>Some files could be accessed directly and could cause a direct files access.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 4.0.6</li> <li>All in One SEO Pack 4.0.7</li> <li>All in One SEO Pack 4.0.8</li> <li>All in One SEO Pack 4.0.9</li> <li>All in One SEO Pack 4.0.10</li> <li>All in One SEO Pack 4.0.12</li> <li>All in One SEO Pack 4.0.15</li> </ul> Tue, 13 Apr 2021 12:49:14 GMTAll in One SEO Pack4433<p>Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error pages. <br> <br>CVE Number: CVE-2021-26030</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> </ul> Thu, 15 Apr 2021 14:07:05 GMTJoomla4438<p>Inadequate filters on module layout settings could lead to a LFI (Local File Inclusion). <br> <br>CVE Number: CVE-2021-26031</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> </ul> Thu, 15 Apr 2021 14:07:05 GMTJoomla4439<p>Allow authenticated users to read the contents of password protected posts if they have the `edit_post` meta capability for the post.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.7</li> </ul> Fri, 16 Apr 2021 16:44:06 GMTWordPress4440<p>Several frontend element in the sales module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Thu, 22 Apr 2021 11:17:38 GMTMagento4436<p>Drupal core's sanitize API failed to properly filter cross-site scripting under certain circumstances.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 7.65</li> <li>Drupal 7.66</li> <li>Drupal 7.67</li> <li>Drupal 7.68</li> <li>Drupal 7.69</li> <li>Drupal 7.70</li> <li>Drupal 7.71</li> <li>Drupal 7.72</li> <li>Drupal 7.73</li> <li>Drupal 7.74</li> <li>Drupal 7.75</li> <li>Drupal 7.76</li> <li>Drupal 7.77</li> <li>Drupal 7.78</li> <li>Drupal 7.79</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> </ul> Thu, 22 Apr 2021 13:48:51 GMTDrupal4447<p>Several template element in the sales module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Mon, 03 May 2021 12:39:48 GMTMagento4445<p>For generating the password hash, not always the correct encryption model was used. This could lead to signature bypass.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Tue, 04 May 2021 09:14:37 GMTMagento4446<p>To make sure post data for downloadable checkout cart is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.1.1</li> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Wed, 05 May 2021 13:51:28 GMTMagento4427<p>Several frontend elements in the MSRP (Manufacturer’s Suggested Retail Price) module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Thu, 06 May 2021 13:06:51 GMTMagento4457<p>Several admin template elements in the sales module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Tue, 11 May 2021 08:26:43 GMTMagento4458<p>CVE-2020-36326 - An external file could be unexpectedly executable if it was used as a path to an attachment file via PHP's support for .phar files`. Exploitation requires that an attacker was able to provide an unfiltered path to a file to attach. <br> <br>CVE-2018-19296 - Was vulnerable to an object injection attack by passing phar:// paths into addAttachment() and other functions that could receive unfiltered local paths, possibly lead to RCE.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> </ul> Fri, 14 May 2021 15:25:53 GMTWordPress4465<p>CVE-2020-36326 - An external file could be unexpectedly executable if it was used as a path to an attachment file via PHP's support for .phar files`. Exploitation requires that an attacker was able to provide an unfiltered path to a file to attach. <br> <br>CVE-2018-19296 - Was vulnerable to an object injection attack by passing phar:// paths into addAttachment() and other functions that could receive unfiltered local paths, possibly lead to RCE.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>ownCloud 7.0.0</li> <li>ownCloud 7.0.1</li> <li>ownCloud 7.0.2</li> <li>ownCloud 7.0.3</li> <li>ownCloud 7.0.4</li> <li>ownCloud 7.0.5</li> <li>ownCloud 7.0.6</li> <li>ownCloud 7.0.7</li> <li>ownCloud 7.0.8</li> <li>ownCloud 7.0.10</li> <li>ownCloud 7.0.11</li> <li>ownCloud 7.0.12</li> <li>ownCloud 8.0.0</li> <li>ownCloud 8.0.2</li> <li>ownCloud 8.0.3</li> <li>ownCloud 8.0.4</li> <li>ownCloud 8.0.5</li> <li>ownCloud 8.0.6</li> <li>ownCloud 8.0.8</li> <li>ownCloud 8.0.9</li> <li>ownCloud 8.0.10</li> <li>LimeSurvey 1.1.0</li> <li>LimeSurvey 2.2.5</li> <li>LimeSurvey 2.05+140730</li> <li>LimeSurvey 2.05+140811</li> <li>LimeSurvey 2.05+140821</li> <li>LimeSurvey 2.05+140902</li> <li>LimeSurvey 2.05+140911</li> <li>LimeSurvey 2.05+140915</li> <li>LimeSurvey 2.05+141003</li> <li>LimeSurvey 2.05+141020</li> <li>LimeSurvey 2.05+141109</li> <li>LimeSurvey 2.05+141110</li> <li>LimeSurvey 2.05+141113</li> <li>LimeSurvey 2.05+141123</li> <li>LimeSurvey 2.05+141126</li> <li>LimeSurvey 2.05+141210</li> <li>LimeSurvey 2.05+141229</li> <li>LimeSurvey 2.05+150211</li> <li>LimeSurvey 2.05+150310</li> <li>LimeSurvey 2.05+150413</li> <li>LimeSurvey 2.05+150508</li> <li>LimeSurvey 2.05+150520</li> <li>LimeSurvey 2.06</li> <li>LimeSurvey 2.06+150611</li> <li>LimeSurvey 2.06+150612</li> <li>LimeSurvey 2.06+150619</li> <li>LimeSurvey 2.06+150629</li> <li>LimeSurvey 2.06+150723</li> <li>LimeSurvey 2.06+150729</li> <li>LimeSurvey 2.06+150730</li> <li>LimeSurvey 2.06+150731</li> <li>LimeSurvey 2.06+150812</li> <li>LimeSurvey 2.06+150824</li> <li>LimeSurvey 2.06+150825</li> <li>LimeSurvey 2.06+150831</li> <li>LimeSurvey 2.06+150911</li> <li>LimeSurvey 2.06+150930</li> <li>LimeSurvey 2.06+151014</li> <li>LimeSurvey 2.06+151016</li> <li>LimeSurvey 2.06+151018</li> <li>LimeSurvey 2.06+151109</li> <li>LimeSurvey 2.06+151126</li> <li>LimeSurvey 2.06+151205</li> <li>LimeSurvey 2.06+151215</li> <li>LimeSurvey 2.06+160121</li> <li>LimeSurvey 2.06+160123</li> <li>LimeSurvey 2.06+160129</li> <li>LimeSurvey 2.06RC1</li> <li>LimeSurvey 2.06RC2</li> <li>LimeSurvey 2.50.1</li> <li>LimeSurvey 2.50+160202</li> <li>LimeSurvey 2.50+160204</li> <li>LimeSurvey 2.50+160206</li> <li>LimeSurvey 2.50+160210</li> <li>LimeSurvey 2.50+160212</li> <li>LimeSurvey 2.50+160215</li> <li>LimeSurvey 2.50+160216</li> <li>LimeSurvey 2.50+160218</li> <li>LimeSurvey 2.50+160219</li> <li>LimeSurvey 2.50+160222</li> <li>LimeSurvey 2.50+160223</li> <li>LimeSurvey 2.50+160225</li> <li>LimeSurvey 2.50+160228</li> <li>LimeSurvey 2.50+160307</li> <li>LimeSurvey 2.50+160308</li> <li>LimeSurvey 2.50+160311</li> <li>LimeSurvey 2.50+160316</li> <li>LimeSurvey 2.50+160401</li> <li>LimeSurvey 2.50+160404</li> <li>LimeSurvey 2.50+160405</li> <li>LimeSurvey 2.50+160411</li> <li>LimeSurvey 2.50+160413</li> <li>LimeSurvey 2.50+160414</li> <li>LimeSurvey 2.50+160415</li> <li>LimeSurvey 2.50+160418</li> <li>LimeSurvey 2.50+160421</li> <li>LimeSurvey 2.50+160428</li> <li>LimeSurvey 2.50+160430</li> <li>LimeSurvey 2.50+160504</li> <li>LimeSurvey 2.50+160506</li> <li>LimeSurvey 2.50+160512</li> <li>LimeSurvey 2.50+160517</li> <li>LimeSurvey 2.50+160523</li> <li>LimeSurvey 2.50+160526</li> <li>LimeSurvey 2.50+160602</li> <li>LimeSurvey 2.50+160606</li> <li>LimeSurvey 2.50+160613</li> <li>LimeSurvey 2.50+160614</li> <li>LimeSurvey 2.50+160616</li> <li>LimeSurvey 2.50+160620</li> <li>LimeSurvey 2.50+160715</li> <li>LimeSurvey 2.50+160718</li> <li>LimeSurvey 2.50+160726</li> <li>LimeSurvey 2.50+160731</li> <li>LimeSurvey 2.50+160804</li> <li>LimeSurvey 2.50+160816</li> <li>LimeSurvey 2.50+160817</li> <li>LimeSurvey 2.50+160213</li> <li>LimeSurvey 2.50+160217</li> <li>LimeSurvey 2.50+160309</li> <li>LimeSurvey 2.50+160310</li> <li>LimeSurvey 2.50+160314</li> <li>LimeSurvey 2.50+160317</li> <li>LimeSurvey 2.50+160323</li> <li>LimeSurvey 2.50+160330</li> <li>LimeSurvey 2.50+160407</li> <li>LimeSurvey 2.50+160408</li> <li>LimeSurvey 2.50+160412</li> <li>LimeSurvey 2.50+160425</li> <li>LimeSurvey 2.50+160426</li> <li>LimeSurvey 2.50+160503</li> <li>LimeSurvey 2.50+160516</li> <li>LimeSurvey 2.50+160525</li> <li>LimeSurvey 2.50+160529</li> <li>LimeSurvey 2.50+160603</li> <li>LimeSurvey 2.50+160714</li> <li>LimeSurvey 2.50+160725</li> <li>LimeSurvey 2.50+160727</li> <li>LimeSurvey 2.50+160728</li> <li>LimeSurvey 2.50+160810</li> <li>LimeSurvey 2.50+160812</li> <li>LimeSurvey 2.50RC1</li> <li>LimeSurvey 2.50RC2</li> <li>LimeSurvey 2.50RC3</li> <li>LimeSurvey 2.50RC4</li> <li>LimeSurvey 2.50RC5</li> <li>LimeSurvey 2.50RC6</li> <li>LimeSurvey 2.50RC7</li> <li>LimeSurvey 2.50RC8</li> <li>LimeSurvey 2.51.0</li> <li>LimeSurvey 2.51.1</li> <li>LimeSurvey 2.51.2</li> <li>LimeSurvey 2.51.3</li> <li>LimeSurvey 2.51.4</li> <li>LimeSurvey 2.51.4+160908</li> <li>LimeSurvey 2.52+160929</li> <li>LimeSurvey 2.53+161004</li> <li>LimeSurvey 2.54.1+161010</li> <li>LimeSurvey 2.54+161007</li> <li>LimeSurvey 2.54.2+161012</li> <li>LimeSurvey 2.54.3+161014</li> <li>LimeSurvey 2.54.4+161018</li> <li>LimeSurvey 2.54.5+161019</li> <li>LimeSurvey 2.55.1+161026</li> <li>LimeSurvey 2.55+161021</li> <li>LimeSurvey 2.55.2+161103</li> <li>LimeSurvey 2.55.3+161111</li> <li>LimeSurvey 2.56.1+161118</li> <li>LimeSurvey 2.56+161117</li> <li>LimeSurvey 2.57.0+161202</li> <li>LimeSurvey 2.57.1+161205</li> <li>LimeSurvey 2.58.0+170104</li> <li>LimeSurvey 2.58.1+170113</li> <li>LimeSurvey 2.58.2+170114</li> <li>LimeSurvey 2.59.0+170115</li> <li>LimeSurvey 2.59.1+170116</li> <li>LimeSurvey 2.62.0+170124</li> <li>LimeSurvey 2.62.1+170130</li> <li>LimeSurvey 2.62.2+170203</li> <li>LimeSurvey 2.63.0+170304</li> <li>LimeSurvey 2.63.1+170305</li> <li>LimeSurvey 2.64.0+170307</li> <li>LimeSurvey 2.64.1+170310</li> <li>LimeSurvey 2.64.2+170324</li> <li>LimeSurvey 2.64.3+170327</li> <li>LimeSurvey 2.64.4+170330</li> <li>LimeSurvey 2.64.5+170331</li> <li>LimeSurvey 2.64.6+170332</li> <li>LimeSurvey 2.64.7+170404</li> <li>LimeSurvey 2.65.0+170502</li> <li>LimeSurvey 2.65.0+170522</li> <li>LimeSurvey 2.65.1+170522</li> <li>LimeSurvey 2.65.2+170606</li> <li>LimeSurvey 2.65.3+170607</li> <li>LimeSurvey 2.65.4+170612</li> <li>LimeSurvey 2.65.5+170613</li> <li>LimeSurvey 2.65.6+170615</li> <li>LimeSurvey 2.66.6+170619</li> <li>LimeSurvey 2.67.0+170622</li> <li>LimeSurvey 2.67.1+170626</li> <li>LimeSurvey 2.67.2+170719</li> <li>LimeSurvey 2.67.2+170728</li> <li>LimeSurvey 2.67.3+170728</li> <li>LimeSurvey 2.70.0+170921</li> <li>LimeSurvey 2.71.0+170925</li> <li>LimeSurvey 2.71.1+170927</li> <li>LimeSurvey 2.72.0+171010</li> <li>LimeSurvey 2.72.1+171012</li> <li>LimeSurvey 2.72.2+171017</li> <li>LimeSurvey 2.72.3+171020</li> <li>LimeSurvey 2.72.4+171110</li> <li>LimeSurvey 2.72.5+171121</li> <li>LimeSurvey 2.72.6+171207</li> <li>LimeSurvey 2.73.0+171219</li> <li>LimeSurvey 2.73.1+171220</li> <li>LimeSurvey 3.0.0+171222</li> <li>LimeSurvey 3.0.0-RC.1</li> <li>LimeSurvey 3.0.0-RC.2+171102</li> <li>LimeSurvey 3.0.0-RC.3+171114</li> <li>LimeSurvey 3.0.1+171228</li> <li>LimeSurvey 3.0.2+180110</li> <li>LimeSurvey 3.0.3+180112</li> <li>LimeSurvey 3.0.4+180116</li> <li>LimeSurvey 3.0.5+180118</li> <li>LimeSurvey 3.1.0</li> <li>LimeSurvey 3.1.1+180130</li> <li>LimeSurvey 3.17.10+190821</li> <li>LimeSurvey 3.17.11+190822</li> <li>LimeSurvey 3.17.1+190408</li> <li>LimeSurvey 3.17.12+190823</li> <li>LimeSurvey 3.17.13+190824</li> <li>LimeSurvey 3.17.14+190902</li> <li>LimeSurvey 3.17.15+190903</li> <li>LimeSurvey 3.17.16+190906</li> <li>LimeSurvey 3.17.17+190918</li> <li>LimeSurvey 3.17.3+190429</li> <li>LimeSurvey 3.17.4+190529</li> <li>LimeSurvey 3.17.5+190604</li> <li>LimeSurvey 3.17.6+190624</li> <li>LimeSurvey 3.17.7+190627</li> <li>LimeSurvey 3.17.8+190722</li> <li>LimeSurvey 3.17.9+190731</li> <li>LimeSurvey 3.18.0+190923</li> <li>LimeSurvey 3.19.0+191008</li> <li>LimeSurvey 3.19.1+191009</li> <li>LimeSurvey 3.19.2+191017</li> <li>LimeSurvey 3.19.3+191023</li> <li>LimeSurvey 3.2.0+180206</li> <li>LimeSurvey 3.2.1+180207</li> <li>LimeSurvey 3.20.0+191112</li> <li>LimeSurvey 3.20.1+191114</li> <li>LimeSurvey 3.20.2+191119</li> <li>LimeSurvey 3.21.0+191203</li> <li>LimeSurvey 3.21.1+191210</li> <li>LimeSurvey 3.21.2+191216</li> <li>LimeSurvey 3.21.3+191219</li> <li>LimeSurvey 3.21.4+0108</li> <li>LimeSurvey 3.21.4+200108</li> <li>LimeSurvey 3.21.5+0115</li> <li>LimeSurvey 3.21.5+200115</li> <li>LimeSurvey 3.21.6+200121</li> <li>LimeSurvey 3.22.0+200127</li> <li>LimeSurvey 3.22.10+200323</li> <li>LimeSurvey 3.22.11+200330</li> <li>LimeSurvey 3.22.1+200129</li> <li>LimeSurvey 3.22.12+200406</li> <li>LimeSurvey 3.22.13+200415</li> <li>LimeSurvey 3.22.14+200423</li> <li>LimeSurvey 3.22.15+200505</li> <li>LimeSurvey 3.22.16+200519</li> <li>LimeSurvey 3.22.17+200525</li> <li>LimeSurvey 3.22.18+200603</li> <li>LimeSurvey 3.22.19+200605</li> <li>LimeSurvey 3.22.20+200617</li> <li>LimeSurvey 3.22.210+200804</li> <li>LimeSurvey 3.22.21+200622</li> <li>LimeSurvey 3.22.2+200204</li> <li>LimeSurvey 3.22.22+200625</li> <li>LimeSurvey 3.22.23+200626</li> <li>LimeSurvey 3.22.24+200630</li> <li>LimeSurvey 3.22.25+200706</li> <li>LimeSurvey 3.22.26+200714</li> <li>LimeSurvey 3.22.27+200720</li> <li>LimeSurvey 3.22.28+200728</li> <li>LimeSurvey 3.22.29+200731</li> <li>LimeSurvey 3.22.3+200211</li> <li>LimeSurvey 3.22.4+200212</li> <li>LimeSurvey 3.22.5+200218</li> <li>LimeSurvey 3.22.6+200219</li> <li>LimeSurvey 3.22.7+200225</li> <li>LimeSurvey 3.22.8+200309</li> <li>LimeSurvey 3.22.9+200317</li> <li>LimeSurvey 3.23.0+200813</li> <li>LimeSurvey 3.23.1+200825</li> <li>LimeSurvey 3.23.2+200908</li> <li>LimeSurvey 3.23.3+200909</li> <li>LimeSurvey 3.23.4+200922</li> <li>LimeSurvey 3.23.5+200923</li> <li>LimeSurvey 3.23.6+200929</li> <li>LimeSurvey 3.23.7+201006</li> <li>LimeSurvey 3.24.0+201013</li> <li>LimeSurvey 3.24.1+201014</li> <li>LimeSurvey 3.24.2+201020</li> <li>LimeSurvey 3.24.3+201027</li> <li>LimeSurvey 3.24.4+201103</li> <li>LimeSurvey 3.24.5+201104</li> <li>LimeSurvey 3.24.6+201109</li> <li>LimeSurvey 3.25.0+201117</li> <li>LimeSurvey 3.25.10+210128</li> <li>LimeSurvey 3.25.11+210210</li> <li>LimeSurvey 3.25.1+201124</li> <li>LimeSurvey 3.25.12+210211</li> <li>LimeSurvey 3.25.13+210216</li> <li>LimeSurvey 3.25.14+210218</li> <li>LimeSurvey 3.25.15+210223</li> <li>LimeSurvey 3.25.16+210302</li> <li>LimeSurvey 3.25.17+210309</li> <li>LimeSurvey 3.25.18+210316</li> <li>LimeSurvey 3.25.19+210323</li> <li>LimeSurvey 3.25.20+210330</li> <li>LimeSurvey 3.25.21+210407</li> <li>LimeSurvey 3.25.2+201131</li> <li>LimeSurvey 3.25.22+210413</li> <li>LimeSurvey 3.25.3+201208</li> <li>LimeSurvey 3.25.4+201215</li> <li>LimeSurvey 3.25.5+201222</li> <li>LimeSurvey 3.25.6+201229</li> <li>LimeSurvey 3.25.7+210113</li> <li>LimeSurvey 3.25.8+210118</li> <li>LimeSurvey 3.25.9+210125</li> <li>LimeSurvey 3.26.0+210419</li> <li>LimeSurvey 3.26.1+210427</li> <li>LimeSurvey 3.26.2+210503</li> <li>LimeSurvey 3.26.3+210511</li> <li>LimeSurvey 3.26.4+210517</li> <li>LimeSurvey 3.26.5+210519</li> <li>LimeSurvey 3.27.0+210525</li> <li>LimeSurvey 3.27.1+210531</li> <li>LimeSurvey 3.27.2+210608</li> <li>LimeSurvey 3.27.3+210615</li> <li>LimeSurvey 3.27.4+210622</li> <li>LimeSurvey 3.27.5+210624</li> <li>LimeSurvey 3.27.6+210629</li> <li>LimeSurvey 3.27.7+210713</li> <li>LimeSurvey 3.27.8+210721</li> <li>LimeSurvey 3.3.0+180209</li> <li>LimeSurvey 3.3.1</li> <li>LimeSurvey 3.4.0+180219</li> <li>LimeSurvey 4.0.0+0116</li> <li>LimeSurvey 4.0.0+200116</li> <li>LimeSurvey 4.0.0-RC10+191202</li> <li>LimeSurvey 4.0.0-RC11+191209</li> <li>LimeSurvey 4.0.0-RC1+190509</li> <li>LimeSurvey 4.0.0-RC1+190705</li> <li>LimeSurvey 4.0.0-RC12+191217</li> <li>LimeSurvey 4.0.0-RC13+191223</li> <li>LimeSurvey 4.0.0-RC14+0109</li> <li>LimeSurvey 4.0.0-RC14+200109</li> <li>LimeSurvey 4.0.0-RC2+190723</li> <li>LimeSurvey 4.0.0-RC3+190807</li> <li>LimeSurvey 4.0.0-RC4+190930</li> <li>LimeSurvey 4.0.0-RC5+191014</li> <li>LimeSurvey 4.0.0-RC6+191022</li> <li>LimeSurvey 4.0.0-RC7+191111</li> <li>LimeSurvey 4.0.0-RC8+191118</li> <li>LimeSurvey 4.0.0-RC9+191125</li> <li>LimeSurvey 4.0.1+0120</li> <li>LimeSurvey 4.0.1+200120</li> <li>LimeSurvey 4.1.0+0128</li> <li>LimeSurvey 4.1.0+200128</li> <li>LimeSurvey 4.1.10+0311</li> <li>LimeSurvey 4.1.10+200311</li> <li>LimeSurvey 4.1.1+0203</li> <li>LimeSurvey 4.1.11+0316</li> <li>LimeSurvey 4.1.11+200316</li> <li>LimeSurvey 4.1.1+200203</li> <li>LimeSurvey 4.1.12+0324</li> <li>LimeSurvey 4.1.12+200324</li> <li>LimeSurvey 4.1.13+0325</li> <li>LimeSurvey 4.1.13+200325</li> <li>LimeSurvey 4.1.14+0331</li> <li>LimeSurvey 4.1.14+200331</li> <li>LimeSurvey 4.1.15+0402</li> <li>LimeSurvey 4.1.15+200402</li> <li>LimeSurvey 4.1.16+0407</li> <li>LimeSurvey 4.1.16+200407</li> <li>LimeSurvey 4.1.17+0414</li> <li>LimeSurvey 4.1.17+200414</li> <li>LimeSurvey 4.1.18+0416</li> <li>LimeSurvey 4.1.18+200416</li> <li>LimeSurvey 4.1.2+0210</li> <li>LimeSurvey 4.1.2+200210</li> <li>LimeSurvey 4.1.3+0213</li> <li>LimeSurvey 4.1.3+200213</li> <li>LimeSurvey 4.1.4+0214</li> <li>LimeSurvey 4.1.4+200214</li> <li>LimeSurvey 4.1.5+0217</li> <li>LimeSurvey 4.1.5+200217</li> <li>LimeSurvey 4.1.6+0220</li> <li>LimeSurvey 4.1.6+200220</li> <li>LimeSurvey 4.1.7+0224</li> <li>LimeSurvey 4.1.7+200224</li> <li>LimeSurvey 4.1.8+0302</li> <li>LimeSurvey 4.1.8+200302</li> <li>LimeSurvey 4.1.9+0310</li> <li>LimeSurvey 4.1.9+200310</li> <li>LimeSurvey 4.2.0+0422</li> <li>LimeSurvey 4.2.0+200422</li> <li>LimeSurvey 4.2.1+0428</li> <li>LimeSurvey 4.2.1+200428</li> <li>LimeSurvey 4.2.2+0504</li> <li>LimeSurvey 4.2.2+200504</li> <li>LimeSurvey 4.2.3+0511</li> <li>LimeSurvey 4.2.3+200511</li> <li>LimeSurvey 4.2.4+0520</li> <li>LimeSurvey 4.2.4+200520</li> <li>LimeSurvey 4.2.5+0526</li> <li>LimeSurvey 4.2.5+200526</li> <li>LimeSurvey 4.2.6+0602</li> <li>LimeSurvey 4.2.6+200602</li> <li>LimeSurvey 4.2.7+0604</li> <li>LimeSurvey 4.2.7+200604</li> <li>LimeSurvey 4.2.8+0608</li> <li>LimeSurvey 4.2.8+200608</li> <li>LimeSurvey 4.3.0+0616</li> <li>LimeSurvey 4.3.0+200616</li> <li>LimeSurvey 4.3.10+200812</li> <li>LimeSurvey 4.3.1+0623</li> <li>LimeSurvey 4.3.11+200817</li> <li>LimeSurvey 4.3.1+200623</li> <li>LimeSurvey 4.3.12+200820</li> <li>LimeSurvey 4.3.13+200824</li> <li>LimeSurvey 4.3.14+200826</li> <li>LimeSurvey 4.3.15+200907</li> <li>LimeSurvey 4.3.16+200915</li> <li>LimeSurvey 4.3.17+200921</li> <li>LimeSurvey 4.3.18+200928</li> <li>LimeSurvey 4.3.19+201005</li> <li>LimeSurvey 4.3.20+201012</li> <li>LimeSurvey 4.3.2+0629</li> <li>LimeSurvey 4.3.21+201015</li> <li>LimeSurvey 4.3.2+200629</li> <li>LimeSurvey 4.3.22+201019</li> <li>LimeSurvey 4.3.23+201026</li> <li>LimeSurvey 4.3.24+201102</li> <li>LimeSurvey 4.3.25+201105</li> <li>LimeSurvey 4.3.26+201110</li> <li>LimeSurvey 4.3.27+201116</li> <li>LimeSurvey 4.3.28+201123</li> <li>LimeSurvey 4.3.29+201130</li> <li>LimeSurvey 4.3.30+201207</li> <li>LimeSurvey 4.3.3+0707</li> <li>LimeSurvey 4.3.31+201214</li> <li>LimeSurvey 4.3.3+200707</li> <li>LimeSurvey 4.3.32+201221</li> <li>LimeSurvey 4.3.33+201228</li> <li>LimeSurvey 4.3.34+210119</li> <li>LimeSurvey 4.3.4+200713</li> <li>LimeSurvey 4.3.5+200721</li> <li>LimeSurvey 4.3.6+200727</li> <li>LimeSurvey 4.3.7+200730</li> <li>LimeSurvey 4.3.8+200803</li> <li>LimeSurvey 4.3.9+200806</li> <li>LimeSurvey 4.4.0+210129</li> <li>LimeSurvey 4.4.0-RC1+201223</li> <li>LimeSurvey 4.4.0-RC2+210104</li> <li>LimeSurvey 4.4.0-RC3+210112</li> <li>LimeSurvey 4.4.10+210222</li> <li>LimeSurvey 4.4.11+210301</li> <li>LimeSurvey 4.4.1+210201</li> <li>LimeSurvey 4.4.12+210308</li> <li>LimeSurvey 4.4.13+210315</li> <li>LimeSurvey 4.4.14+210322</li> <li>LimeSurvey 4.4.15+210329</li> <li>LimeSurvey 4.4.16+210406</li> <li>LimeSurvey 4.4.2+210208</li> <li>LimeSurvey 4.4.3+210209</li> <li>LimeSurvey 4.4.4+210212</li> <li>LimeSurvey 4.4.5+210213</li> <li>LimeSurvey 4.4.6+210214</li> <li>LimeSurvey 4.4.7+210215</li> <li>LimeSurvey 4.4.8+210217</li> <li>LimeSurvey 4.4.9+210219</li> <li>LimeSurvey 4.5.0+210412</li> <li>LimeSurvey 4.5.1+210420</li> <li>LimeSurvey 4.5.2+210426</li> <li>LimeSurvey 4.6.0+210504</li> <li>LimeSurvey 4.6.1+210510</li> <li>LimeSurvey 4.6.2+210512</li> <li>LimeSurvey 4.6.3+210518</li> <li>LimeSurvey 5.0.0+210526</li> <li>LimeSurvey 5.0.10+210723</li> <li>LimeSurvey 5.0.1+210532</li> <li>LimeSurvey 5.0.2+210607</li> <li>LimeSurvey 5.0.3+210609</li> <li>LimeSurvey 5.0.4+210614</li> <li>LimeSurvey 5.0.5+210621</li> <li>LimeSurvey 5.0.6+210625</li> <li>LimeSurvey 5.0.7+210628</li> <li>LimeSurvey 5.0.8+210712</li> <li>LimeSurvey 5.0.9+210722</li> <li>MODX 2.0.1</li> <li>MODX 2.3.0-pl</li> <li>MODX 2.3.1-pl</li> <li>MODX 2.3.2-pl</li> <li>MODX 2.3.3-pl</li> <li>MODX 2.3.4-pl</li> <li>MODX 2.3.5-pl</li> <li>MODX 2.3.6-pl</li> <li>MODX 2.4.0-pl</li> <li>MODX 2.4.1-pl</li> <li>MODX 2.4.2-pl</li> <li>MODX 2.4.3-pl</li> <li>MODX 2.4.4-pl</li> <li>MODX 2.5.0-pl</li> <li>MODX 2.5.1-pl</li> <li>MODX 2.5.2-pl</li> <li>MODX 2.5.3-pl</li> <li>MODX 2.5.4-pl</li> <li>MODX 2.5.5-pl</li> <li>MODX 2.5.6-pl</li> <li>MODX 2.5.7-pl</li> <li>MODX 2.5.8-pl</li> <li>MODX 2.6.0-pl</li> <li>MODX 2.6.1-pl</li> <li>MODX 2.6.2-pl</li> <li>MODX 2.6.3-pl</li> <li>MODX 2.6.4-pl</li> <li>MODX 2.6.5-pl</li> <li>MODX 2.7.0-pl</li> <li>MODX 2.7.1-pl</li> <li>MODX 2.7.2-pl</li> <li>MODX 2.7.3-pl</li> <li>MODX 2.8.0-pl</li> <li>MODX 2.8.1-pl</li> <li>MODX 2.8.2-pl</li> <li>PHPFusion 8.00.20</li> <li>PHPFusion 8.00.21</li> <li>PHPFusion 8.00.40</li> <li>PHPFusion 8.00.70</li> <li>PHPFusion 9.03.00</li> <li>PHPFusion 9.03.10</li> <li>PHPFusion 9.03.30</li> <li>Booked 2.6</li> <li>phpList 3.0.9</li> <li>phpList 3.0.10</li> <li>phpList 3.0.11</li> <li>phpList 3.0.12</li> <li>phpList 3.2.0</li> <li>phpList 3.2.1</li> <li>phpList 3.2.2</li> <li>phpList 3.2.3</li> <li>phpList 3.2.4</li> <li>phpList 3.2.5</li> <li>phpList 3.2.6</li> <li>phpList 3.2.7</li> <li>phpList 3.5.3</li> <li>phpList 3.5.4</li> <li>phpList 3.5.5</li> <li>phpList 3.5.6</li> <li>phpList 3.5.7</li> <li>ZenPhoto 1.4.14</li> <li>ZenPhoto 1.5</li> <li>ZenPhoto 1.5.1</li> <li>ZenPhoto 1.5.2</li> <li>ZenPhoto 1.5.3</li> <li>ZenPhoto 1.5.4</li> <li>ZenPhoto 1.5.5</li> <li>ZenPhoto 1.5.6</li> <li>ZenPhoto 1.5.7</li> <li>vTiger 7.2.0</li> <li>XOOPS 2.5.7.3</li> <li>XOOPS 2.5.8</li> <li>XOOPS 2.5.8.1</li> <li>XOOPS 2.5.10</li> <li>XOOPS 2.5.10-rc</li> <li>XOOPS 2.5.11</li> <li>XOOPS 2.5.11-beta2</li> <li>XOOPS 2.5.11-rc1</li> <li>XOOPS 2.5.11-rc2</li> <li>XOOPS 2.5.11-rc3</li> <li>XOOPS 2.5.8-beta1</li> <li>XOOPS 2.5.8-rc1</li> <li>XOOPS 2.5.8-rc2</li> <li>XOOPS 2.5.8-rc3</li> <li>XOOPS 2.5.9</li> <li>XOOPS 2.5.9-rc1</li> <li>XOOPS 2.5.9-rc2</li> <li>XOOPS 2.5.9-rc3</li> <li>XOOPS a2.5.11-rc2</li> <li>PHPMailer 5.2.4</li> <li>PHPMailer 5.2.5</li> <li>PHPMailer 5.2.6</li> <li>PHPMailer 5.2.7</li> <li>PHPMailer 5.2.8</li> <li>PHPMailer 5.2.9</li> <li>PHPMailer 5.2.10</li> <li>PHPMailer 5.2.11</li> <li>PHPMailer 5.2.12</li> <li>PHPMailer 5.2.13</li> <li>PHPMailer 5.2.14</li> <li>PHPMailer 5.2.15</li> <li>PHPMailer 5.2.16</li> <li>PHPMailer 5.2.17</li> <li>PHPMailer 5.2.18</li> <li>PHPMailer 5.2.19</li> <li>PHPMailer 5.2.20</li> <li>PHPMailer 5.2.21</li> <li>PHPMailer 5.2.22</li> <li>PHPMailer 5.2.23</li> <li>PHPMailer 5.2.24</li> <li>PHPMailer 5.2.25</li> <li>PHPMailer 5.2.26</li> <li>PHPMailer 5.2.27</li> <li>PHPMailer 5.2.28</li> <li>PHPMailer 6.0.0</li> <li>PHPMailer 6.0.0-rc1</li> <li>PHPMailer 6.0.0-rc2</li> <li>PHPMailer 6.0.0-rc3</li> <li>PHPMailer 6.0.0-rc4</li> <li>PHPMailer 6.0.0-rc5</li> <li>PHPMailer 6.0.1</li> <li>PHPMailer 6.0.2</li> <li>PHPMailer 6.0.3</li> <li>PHPMailer 6.0.4</li> <li>PHPMailer 6.0.5</li> <li>PHPMailer 6.0.6</li> <li>PHPMailer 6.0.7</li> <li>PHPMailer 6.1.0</li> <li>PHPMailer 6.1.1</li> <li>PHPMailer 6.1.2</li> <li>PHPMailer 6.1.3</li> <li>PHPMailer 6.1.4</li> <li>PHPMailer 6.1.5</li> <li>PHPMailer 6.1.6</li> <li>PHPMailer 6.1.7</li> <li>PHPMailer 6.1.8</li> <li>PHPMailer 6.2.0</li> <li>PHPMailer 6.3.0</li> <li>PHPMailer 6.4.0</li> </ul> Sat, 15 May 2021 14:27:02 GMTPHPMailer4466<p>Several elements and paths weren't properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Mon, 17 May 2021 11:06:36 GMTWooCommerce4456<p>Several order item elements in the sales module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Wed, 19 May 2021 14:39:48 GMTMagento4459<p>Url in tax module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 25 May 2021 09:02:47 GMTMagento4476<p>Several elements in the swatch module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Tue, 25 May 2021 09:02:47 GMTMagento4477<p>Signifyd order session wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 25 May 2021 09:02:47 GMTMagento4478<p>HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> </ul> Fri, 28 May 2021 13:33:36 GMTJoomla4481<p>A missing token check caused a CSRF vulnerability in the AJAX reordering endpoint.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> </ul> Fri, 28 May 2021 13:33:36 GMTJoomla4480<p>A missing token check caused a CSRF vulnerability in data download endpoints in com_banners and com_sysinfo.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> </ul> Fri, 28 May 2021 13:33:36 GMTJoomla4482<p>For generating the password hash, not always the correct encryption model was used in customer model. This could lead to signature bypass.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Mon, 31 May 2021 07:58:14 GMTMagento4479<p>If the serialized string contains an object code execution is terminated to avoid PHP object injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>All in One SEO Pack 4.0.15</li> <li>All in One SEO Pack 4.0.16</li> <li>All in One SEO Pack 4.0.17</li> <li>All in One SEO Pack 4.0.18</li> <li>All in One SEO Pack 4.1.0.1</li> </ul> Tue, 01 Jun 2021 11:10:32 GMTAll in One SEO Pack4464<p>An element in the export module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Thu, 03 Jun 2021 07:55:30 GMTMagento4487<p>Several REST API endpoints weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack pr-update-to</li> </ul> Mon, 07 Jun 2021 07:13:14 GMTJetpack4484<p>The title wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 08 Jun 2021 07:17:53 GMTMagento4490<p>Several elements in the download module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Mon, 14 Jun 2021 10:58:28 GMTMagento4488<p>To make sure post data for frontend shipping and cart is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.0</li> <li>Magento 1.9.2.1</li> <li>Magento 1.9.2.2</li> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Mon, 21 Jun 2021 13:23:16 GMTMagento4492<p>Several feedback messages weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.7</li> <li>Jetpack 2.7.3</li> <li>Jetpack 2.7.4</li> <li>Jetpack 2.7.5</li> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack pr-update-to</li> </ul> Mon, 21 Jun 2021 13:23:16 GMTJetpack4495<p>To make sure post data for cross sell page is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Mon, 21 Jun 2021 13:23:16 GMTMagento4497<p>To make sure post data for grid and list is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Wed, 23 Jun 2021 15:02:54 GMTMagento4498<p>To make sure post data for catalog template is ignored when it fails form key check to avoid CSRF. <br> <br>Part of update 1.9.4.5</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.2.3</li> <li>Magento 1.9.2.4</li> <li>Magento 1.9.3.0</li> <li>Magento 1.9.3.1</li> <li>Magento 1.9.3.2</li> <li>Magento 1.9.3.3</li> <li>Magento 1.9.3.4</li> <li>Magento 1.9.3.6</li> <li>Magento 1.9.3.7</li> <li>Magento 1.9.3.8</li> <li>Magento 1.9.3.9</li> <li>Magento 1.9.3.10</li> <li>Magento 1.9.4.0</li> <li>Magento 1.9.4.1</li> <li>Magento 1.9.4.2</li> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Thu, 24 Jun 2021 11:43:55 GMTMagento4493<p>The implemented cryptographic hash function SHA256 improves the generated (salted) hash which will offer optimized protection against attacks such as brute force.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 1.9.4.3</li> <li>Magento 1.9.4.4</li> </ul> Mon, 28 Jun 2021 12:58:59 GMTMagento4501<p>Several elements in the group template weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7-beta1</li> </ul> Wed, 30 Jun 2021 13:08:04 GMTMagento4503<p>Several elements in the checkout module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Thu, 01 Jul 2021 11:50:03 GMTMagento4505<p>The currency symbol wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 05 Jul 2021 09:51:31 GMTMagento4506<p>The cms module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 05 Jul 2021 09:51:31 GMTMagento4507<p>Several elements in the checkout module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Mon, 05 Jul 2021 09:51:31 GMTMagento4508<p>Inadequate escaping in the Rules field of the JForm API was leading to a XSS vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>Joomla 3.9.27</li> </ul> Sun, 11 Jul 2021 12:23:53 GMTJoomla4518<p>Install action in com_installer lacked the required hardcoded ACL checks for superusers, lead to various potential attack vectors. A default system wasn't affected, because by default com_installer is limited to super users already.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>Joomla 3.9.27</li> </ul> Sun, 11 Jul 2021 12:23:53 GMTJoomla4517<p>Inadequate escaping in the imagelist view of com_media lead to a XSS vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>Joomla 3.9.27</li> </ul> Sun, 11 Jul 2021 12:23:53 GMTJoomla4516<p>Missing validation of input could lead to a broken usergroups table.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>Joomla 3.9.27</li> </ul> Sun, 11 Jul 2021 12:23:53 GMTJoomla4519<p>Various CMS functions did not properly terminate existing user sessions when a user's password was changed or the user was blocked.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 2.5.0</li> <li>Joomla 2.5.1</li> <li>Joomla 2.5.2</li> <li>Joomla 2.5.3</li> <li>Joomla 2.5.4</li> <li>Joomla 2.5.5</li> <li>Joomla 2.5.6</li> <li>Joomla 2.5.7</li> <li>Joomla 2.5.8</li> <li>Joomla 2.5.9</li> <li>Joomla 2.5.10</li> <li>Joomla 2.5.11</li> <li>Joomla 2.5.13</li> <li>Joomla 2.5.14</li> <li>Joomla 2.5.15</li> <li>Joomla 2.5.16</li> <li>Joomla 2.5.17</li> <li>Joomla 2.5.18</li> <li>Joomla 2.5.19</li> <li>Joomla 2.5.20</li> <li>Joomla 2.5.21</li> <li>Joomla 2.5.22</li> <li>Joomla 2.5.23</li> <li>Joomla 2.5.24</li> <li>Joomla 2.5.25</li> <li>Joomla 2.5.26</li> <li>Joomla 2.5.27</li> <li>Joomla 2.5.28</li> <li>Joomla 2.5.28.rc</li> <li>Joomla 3.0.0</li> <li>Joomla 3.0.1</li> <li>Joomla 3.0.2</li> <li>Joomla 3.0.3</li> <li>Joomla 3.0.4</li> <li>Joomla 3.1.0</li> <li>Joomla 3.1.1</li> <li>Joomla 3.1.4</li> <li>Joomla 3.1.5</li> <li>Joomla 3.1.6</li> <li>Joomla 3.2.0</li> <li>Joomla 3.2.1</li> <li>Joomla 3.2.2</li> <li>Joomla 3.2.3</li> <li>Joomla 3.2.4</li> <li>Joomla 3.2.5</li> <li>Joomla 3.2.6</li> <li>Joomla 3.2.7</li> <li>Joomla 3.3.0</li> <li>Joomla 3.3.1</li> <li>Joomla 3.3.2</li> <li>Joomla 3.3.3</li> <li>Joomla 3.3.4</li> <li>Joomla 3.3.5</li> <li>Joomla 3.3.6</li> <li>Joomla 3.4.0</li> <li>Joomla 3.4.0-rc</li> <li>Joomla 3.4.1</li> <li>Joomla 3.4.1-rc</li> <li>Joomla 3.4.1-rc2</li> <li>Joomla 3.4.2</li> <li>Joomla 3.4.2-rc</li> <li>Joomla 3.4.3</li> <li>Joomla 3.4.4</li> <li>Joomla 3.4.4-rc</li> <li>Joomla 3.4.4-rc2</li> <li>Joomla 3.4.5</li> <li>Joomla 3.4.6</li> <li>Joomla 3.4.7</li> <li>Joomla 3.4.8</li> <li>Joomla 3.4.8-rc</li> <li>Joomla 3.5.0</li> <li>Joomla 3.5.0-rc</li> <li>Joomla 3.5.0-rc2</li> <li>Joomla 3.5.0-rc3</li> <li>Joomla 3.5.0-rc4</li> <li>Joomla 3.5.1</li> <li>Joomla 3.5.1-rc</li> <li>Joomla 3.5.1-rc2</li> <li>Joomla 3.6.0</li> <li>Joomla 3.6.0-rc</li> <li>Joomla 3.6.0-rc2</li> <li>Joomla 3.6.1</li> <li>Joomla 3.6.1-rc1</li> <li>Joomla 3.6.1-rc2</li> <li>Joomla 3.6.2</li> <li>Joomla 3.6.3</li> <li>Joomla 3.6.3-rc1</li> <li>Joomla 3.6.3-rc2</li> <li>Joomla 3.6.3-rc3</li> <li>Joomla 3.6.4</li> <li>Joomla 3.6.5</li> <li>Joomla 3.7.0</li> <li>Joomla 3.7.0-rc1</li> <li>Joomla 3.7.0-rc2</li> <li>Joomla 3.7.0-rc3</li> <li>Joomla 3.7.0-rc4</li> <li>Joomla 3.7.1</li> <li>Joomla 3.7.1-rc1</li> <li>Joomla 3.7.1-rc2</li> <li>Joomla 3.7.2</li> <li>Joomla 3.7.3</li> <li>Joomla 3.7.3-rc1</li> <li>Joomla 3.7.3-rc2</li> <li>Joomla 3.7.4</li> <li>Joomla 3.7.4-rc1</li> <li>Joomla 3.7.5</li> <li>Joomla 3.8.0</li> <li>Joomla 3.8.0-rc1</li> <li>Joomla 3.8.1</li> <li>Joomla 3.8.1-rc</li> <li>Joomla 3.8.2</li> <li>Joomla 3.8.2-rc</li> <li>Joomla 3.8.3</li> <li>Joomla 3.8.3-rc</li> <li>Joomla 3.8.4</li> <li>Joomla 3.8.4-rc</li> <li>Joomla 3.8.4-rc2</li> <li>Joomla 3.8.5</li> <li>Joomla 3.8.5-rc</li> <li>Joomla 3.8.6</li> <li>Joomla 3.8.6-rc1</li> <li>Joomla 3.8.7</li> <li>Joomla 3.8.7-rc</li> <li>Joomla 3.8.8</li> <li>Joomla 3.8.8-rc</li> <li>Joomla 3.8.9</li> <li>Joomla 3.8.9-rc</li> <li>Joomla 3.8.10</li> <li>Joomla 3.8.11</li> <li>Joomla 3.8.12</li> <li>Joomla 3.8.13</li> <li>Joomla 3.9.0</li> <li>Joomla 3.9.1</li> <li>Joomla 3.9.2</li> <li>Joomla 3.9.3</li> <li>Joomla 3.9.4</li> <li>Joomla 3.9.5</li> <li>Joomla 3.9.6</li> <li>Joomla 3.9.7</li> <li>Joomla 3.9.8</li> <li>Joomla 3.9.9</li> <li>Joomla 3.9.10</li> <li>Joomla 3.9.11</li> <li>Joomla 3.9.12</li> <li>Joomla 3.9.13</li> <li>Joomla 3.9.14</li> <li>Joomla 3.9.15</li> <li>Joomla 3.9.16</li> <li>Joomla 3.9.17</li> <li>Joomla 3.9.18</li> <li>Joomla 3.9.19</li> <li>Joomla 3.9.20</li> <li>Joomla 3.9.21</li> <li>Joomla 3.9.22</li> <li>Joomla 3.9.23</li> <li>Joomla 3.9.24</li> <li>Joomla 3.9.25</li> <li>Joomla 3.9.26</li> <li>Joomla 3.9.27</li> </ul> Sun, 11 Jul 2021 12:23:53 GMTJoomla4520<p>The parameter for search webhook and attributes in the product filtering weren't properly sanitized against SQL injection. This was a critical vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Fri, 16 Jul 2021 10:19:15 GMTWooCommerce4525<p>Several elements in the configurable module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> </ul> Mon, 19 Jul 2021 10:59:55 GMTMagento4509<p>Elements in the frontend templates for the catalog module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Mon, 19 Jul 2021 10:59:55 GMTMagento4510<p>Elements in the frontend and admin of the catalog module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Tue, 20 Jul 2021 10:25:05 GMTMagento4514<p>Several admin templates for the catalog module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Wed, 21 Jul 2021 14:40:11 GMTMagento4515<p>Several elements in the admin notification module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Thu, 22 Jul 2021 11:40:48 GMTMagento4528<p>The Drupal project uses the PEAR Archive_Tar library, which had released a security update that impacts Drupal. <br> <br>The vulnerability is mitigated by the fact that Drupal core's use of the Archive_Tar library is not vulnerable, as it does not permit symlinks. On the other hand, exploitation was possible if contribution or custom code used the library to extract tar archives (for example .tar, .tar.gz, .bz2, or .tlz) which come from a potentially untrusted source.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.69</li> <li>Drupal 7.70</li> <li>Drupal 7.71</li> <li>Drupal 7.72</li> <li>Drupal 7.73</li> <li>Drupal 7.74</li> <li>Drupal 7.75</li> <li>Drupal 7.76</li> <li>Drupal 7.77</li> <li>Drupal 7.78</li> <li>Drupal 7.79</li> <li>Drupal 7.80</li> <li>Drupal 7.81</li> </ul> Fri, 23 Jul 2021 15:00:35 GMTDrupal4563<p>Several templates for the authorizenet module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 27 Jul 2021 10:38:04 GMTMagento4529<p>Several admin templates elements in the backend module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> </ul> Mon, 02 Aug 2021 08:28:29 GMTMagento4530<p>Several widget template elements in the backend module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 02 Aug 2021 08:28:29 GMTMagento4564<p>Several frontend and admin templates elements of the braintree module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Tue, 03 Aug 2021 08:55:12 GMTMagento4566<p>Several elements in the backend module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Wed, 04 Aug 2021 08:09:50 GMTMagento4565<p>Several elements in the user module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> <li>Magento 2.4.3</li> <li>Magento 2.4.3-p1</li> <li>Magento 2.4.3-p2</li> <li>Magento 2.4.3-p3</li> <li>Magento 2.4.4</li> <li>Magento 2.4.4-p1</li> <li>Magento 2.4.4-p2</li> <li>Magento 2.4.4-p3</li> <li>Magento 2.4.4-p4</li> <li>Magento 2.4.4-p5</li> <li>Magento 2.4.4-p6</li> <li>Magento 2.4.4-p7</li> <li>Magento 2.4.4-p8</li> <li>Magento 2.4.4-p9</li> <li>Magento 2.4.4-p10</li> <li>Magento 2.4.4-p11</li> <li>Magento 2.4.4-p12</li> <li>Magento 2.4.4-p13</li> <li>Magento 2.4.5</li> <li>Magento 2.4.5-p1</li> <li>Magento 2.4.5-p2</li> <li>Magento 2.4.5-p3</li> <li>Magento 2.4.5-p4</li> <li>Magento 2.4.5-p5</li> <li>Magento 2.4.5-p6</li> <li>Magento 2.4.5-p7</li> <li>Magento 2.4.5-p8</li> <li>Magento 2.4.5-p9</li> <li>Magento 2.4.5-p10</li> <li>Magento 2.4.5-p11</li> <li>Magento 2.4.5-p12</li> <li>Magento 2.4.5-p13</li> <li>Magento 2.4.5-p14</li> <li>Magento 2.4.6</li> <li>Magento 2.4.6-p1</li> <li>Magento 2.4.6-p2</li> <li>Magento 2.4.6-p3</li> <li>Magento 2.4.6-p4</li> <li>Magento 2.4.6-p5</li> <li>Magento 2.4.6-p6</li> <li>Magento 2.4.6-p7</li> <li>Magento 2.4.6-p8</li> <li>Magento 2.4.6-p9</li> <li>Magento 2.4.6-p10</li> <li>Magento 2.4.6-p11</li> <li>Magento 2.4.6-p12</li> <li>Magento 2.4.6-p13</li> <li>Magento 2.4.6-p14</li> <li>Magento 2.4.6-p15</li> <li>Magento 2.4.7</li> <li>Magento 2.4.7-beta1</li> <li>Magento 2.4.7-beta2</li> <li>Magento 2.4.7-beta3</li> <li>Magento 2.4.7-p1</li> <li>Magento 2.4.7-p2</li> <li>Magento 2.4.7-p3</li> <li>Magento 2.4.7-p4</li> <li>Magento 2.4.7-p5</li> <li>Magento 2.4.7-p6</li> <li>Magento 2.4.7-p7</li> <li>Magento 2.4.7-p8</li> <li>Magento 2.4.7-p9</li> <li>Magento 2.4.7-p10</li> <li>Magento 2.4.8</li> <li>Magento 2.4.8-beta1</li> <li>Magento 2.4.8-beta2</li> <li>Magento 2.4.8-p1</li> <li>Magento 2.4.8-p2</li> <li>Magento 2.4.8-p3</li> <li>Magento 2.4.8-p4</li> <li>Magento 2.4.8-p5</li> <li>Magento 2.4.9-alpha1</li> <li>Magento 2.4.9-alpha2</li> </ul> Thu, 05 Aug 2021 14:28:37 GMTMagento4567<p>Option element in the bundle module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> </ul> Mon, 09 Aug 2021 06:58:53 GMTMagento4569<p>The country select in the directory module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> </ul> Wed, 11 Aug 2021 14:22:04 GMTMagento4573<p>Several elements in the sales module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Wed, 11 Aug 2021 14:22:04 GMTMagento4575<p>There was no proper whitelisting of attributes to prevent arbitrary code execution.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> </ul> Thu, 12 Aug 2021 11:27:09 GMTMagento4571<p>Row data in the customer import-export wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> </ul> Thu, 12 Aug 2021 11:27:09 GMTMagento4576<p>Several elements in the widget-conditions module weren't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack 9.8</li> <li>Jetpack 9.8.1</li> <li>Jetpack 9.8.2</li> <li>Jetpack 9.8.3</li> <li>Jetpack 9.8-beta</li> <li>Jetpack 9.9</li> <li>Jetpack 9.9-beta</li> <li>Jetpack pr-update-to</li> </ul> Wed, 18 Aug 2021 09:49:09 GMTJetpack4572<p>The column grid renderer of the import-export module was not properly escaped to prevent XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> </ul> Wed, 18 Aug 2021 09:49:09 GMTMagento4574<p>File handling during opening of a file was missing proper validation to avoid URL scheme hijacking.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> </ul> Wed, 18 Aug 2021 09:49:09 GMTMagento4580<p>The backend secret key was not properly checked and validated to prevent signature verification bypass.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> </ul> Fri, 20 Aug 2021 10:33:16 GMTMagento4582<p>The item block of the shipping module was not properly escaped to prevent XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Wed, 25 Aug 2021 12:37:43 GMTMagento4583<p>The media manager did not correctly check the user's permissions before executing a file deletion command.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Joomla 4.0.0</li> </ul> Wed, 25 Aug 2021 12:37:43 GMTJoomla4587<p>The session was not properly validated against unauthorized user access and user's role wasn't controlled correctly to limit access to certain modules in backend</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.4.0</li> </ul> Mon, 30 Aug 2021 12:47:59 GMTMagento4586<p>Various variables in sitemap module was not properly escaped to handle user inputs to prevent stored XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> </ul> Mon, 30 Aug 2021 12:47:59 GMTMagento4585<p>The result page of the import-export module was not properly escaped against stored XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.42.0-beta4</li> <li>Magento 0.42.0-beta5</li> <li>Magento 0.42.0-beta6</li> <li>Magento 0.42.0-beta7</li> <li>Magento 0.42.0-beta8</li> <li>Magento 0.42.0-beta9</li> <li>Magento 0.42.0-beta10</li> <li>Magento 0.42.0-beta11</li> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.4.0</li> </ul> Mon, 30 Aug 2021 12:47:59 GMTMagento4588<p>The store id in the bundle import export module wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> </ul> Thu, 09 Sep 2021 10:27:48 GMTMagento4595<p>Incorrect check in filtering the callback for killing WordPress execution for JSONP REST requests could lead to a data exposure vulnerability.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.11</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.3.8</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.4.6</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.5.5</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.6.4</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> <li>WordPress 5.7.2</li> <li>WordPress 5.8</li> </ul> Sat, 11 Sep 2021 10:01:19 GMTWordPress4599<p>The product object for the JSON search downloadable products wasn't properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.2.3</li> <li>WooCommerce 5.2.4</li> <li>WooCommerce 5.2.5</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.3.1</li> <li>WooCommerce 5.3.2</li> <li>WooCommerce 5.3.3</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.4.2</li> <li>WooCommerce 5.4.3</li> <li>WooCommerce 5.4.4</li> <li>WooCommerce 5.4.5</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce 5.5.1</li> <li>WooCommerce 5.5.2</li> <li>WooCommerce 5.5.3</li> <li>WooCommerce 5.5.4</li> <li>WooCommerce 5.5.5</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Mon, 13 Sep 2021 08:17:38 GMTWooCommerce4594<p>It is potentially possible to exploit a path traversal while decoding a HTML element id when managing images through the wysiwyg editor.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> </ul> Tue, 14 Sep 2021 08:27:04 GMTMagento4596<p>The Drupal core Media module allows embedding internal and external media in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is accessed by a trusted user with permission to embed media. In some cases, this could lead to cross-site scripting. <br> <br>CVE-2020-13673</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> </ul> Sat, 18 Sep 2021 14:42:38 GMTDrupal4624<p>The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. <br> <br>Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed. Removing the "access in-place editing" permission from untrusted users will not fully mitigate the vulnerability. <br> <br>CVE-2020-13674</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> </ul> Sat, 18 Sep 2021 14:42:38 GMTDrupal4625<p>Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass the file validation process implemented by modules on the site.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> </ul> Sat, 18 Sep 2021 14:42:38 GMTDrupal4626<p>The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. <br> <br>Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> </ul> Sat, 18 Sep 2021 14:42:38 GMTDrupal4627<p>Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. <br> <br>Sites that do not have the JSON:API module enabled are not affected. <br> <br>CVE-2020-13677</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> </ul> Sat, 18 Sep 2021 14:42:38 GMTDrupal4628<p>The return message in wp_die for an expired nonce is vulnerable to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 10.0</li> <li>Jetpack 10.0.1</li> <li>Jetpack 10.0.2</li> <li>Jetpack 10.0-beta</li> <li>Jetpack 2.7</li> <li>Jetpack 2.7.3</li> <li>Jetpack 2.7.4</li> <li>Jetpack 2.7.5</li> <li>Jetpack 2.8</li> <li>Jetpack 2.8.3</li> <li>Jetpack 2.8.4</li> <li>Jetpack 2.8.5</li> <li>Jetpack 2.8b1</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9.4</li> <li>Jetpack 2.9.5</li> <li>Jetpack 2.9.6</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.0.4</li> <li>Jetpack 3.0.5</li> <li>Jetpack 3.0.6</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.1.3</li> <li>Jetpack 3.1.4</li> <li>Jetpack 3.1.5</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.2.3</li> <li>Jetpack 3.2.4</li> <li>Jetpack 3.2.5</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.3.4</li> <li>Jetpack 3.3.5</li> <li>Jetpack 3.3.6</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.4.3</li> <li>Jetpack 3.4.4</li> <li>Jetpack 3.4.5</li> <li>Jetpack 3.4.6</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.5.4</li> <li>Jetpack 3.5.5</li> <li>Jetpack 3.5.6</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.6.2</li> <li>Jetpack 3.6.3</li> <li>Jetpack 3.6.4</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.7.3</li> <li>Jetpack 3.7.4</li> <li>Jetpack 3.7.5</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.8.3</li> <li>Jetpack 3.8.4</li> <li>Jetpack 3.8.5</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.10</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 3.9.7</li> <li>Jetpack 3.9.8</li> <li>Jetpack 3.9.9</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.0.5</li> <li>Jetpack 4.0.6</li> <li>Jetpack 4.0.7</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.1.2</li> <li>Jetpack 4.1.3</li> <li>Jetpack 4.1.4</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.2.3</li> <li>Jetpack 4.2.4</li> <li>Jetpack 4.2.5</li> <li>Jetpack 4.3</li> <li>Jetpack 4.3.0</li> <li>Jetpack 4.3.1</li> <li>Jetpack 4.3.2</li> <li>Jetpack 4.3.3</li> <li>Jetpack 4.3.4</li> <li>Jetpack 4.3.5</li> <li>Jetpack 4.4</li> <li>Jetpack 4.4.1</li> <li>Jetpack 4.4.2</li> <li>Jetpack 4.4.3</li> <li>Jetpack 4.4.4</li> <li>Jetpack 4.4.5</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack 9.8</li> <li>Jetpack 9.8.1</li> <li>Jetpack 9.8.2</li> <li>Jetpack 9.8.3</li> <li>Jetpack 9.8-beta</li> <li>Jetpack 9.9</li> <li>Jetpack 9.9.1</li> <li>Jetpack 9.9.2</li> <li>Jetpack 9.9.3</li> <li>Jetpack 9.9-beta</li> <li>Jetpack pr-update-to</li> </ul> Thu, 23 Sep 2021 08:17:03 GMTJetpack4630<p>Missing check for path validation to files and directory could lead to path traversal.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.6</li> </ul> Mon, 27 Sep 2021 09:40:33 GMTMagento4631<p>Missing session cleaning in the customer module during change e-mail request operation can lead to unwanted privilege escalation.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Tue, 28 Sep 2021 07:08:34 GMTMagento4597<p>Missing XML validation check for generated layout update in the widget module could lead to arbitrary code injection via XML.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Tue, 28 Sep 2021 07:08:34 GMTMagento4632<p>The theme module is potentially vulnerable to path traversal due to missing checks for extensions and absolute paths.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> </ul> Tue, 05 Oct 2021 14:53:51 GMTMagento4622<p>Items in the shipping module are not correctly escaped and are vulnerable to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Thu, 07 Oct 2021 13:05:27 GMTMagento4638<p>The referrer for logged in customer redirect URL is not properly validated.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta1</li> <li>Magento 0.74.0-beta2</li> <li>Magento 0.74.0-beta3</li> <li>Magento 0.74.0-beta4</li> <li>Magento 0.74.0-beta5</li> <li>Magento 0.74.0-beta6</li> <li>Magento 0.74.0-beta7</li> <li>Magento 0.74.0-beta8</li> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Tue, 12 Oct 2021 15:18:48 GMTMagento4640<p>Incorrect validation for the real path can lead to creating unintended directories.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.3.7</li> <li>Magento 2.3.7-p1</li> <li>Magento 2.3.7-p2</li> <li>Magento 2.3.7-p3</li> <li>Magento 2.3.7-p4</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> </ul> Mon, 25 Oct 2021 07:49:42 GMTMagento4644<p>Several price elements aren't properly casted to their desired variable types which can lead to XSS</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.2.3</li> <li>WooCommerce 5.2.4</li> <li>WooCommerce 5.2.5</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.3.1</li> <li>WooCommerce 5.3.2</li> <li>WooCommerce 5.3.3</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.4.2</li> <li>WooCommerce 5.4.3</li> <li>WooCommerce 5.4.4</li> <li>WooCommerce 5.4.5</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce 5.5.1</li> <li>WooCommerce 5.5.2</li> <li>WooCommerce 5.5.3</li> <li>WooCommerce 5.5.4</li> <li>WooCommerce 5.5.5</li> <li>WooCommerce 5.6.0</li> <li>WooCommerce 5.6.0-beta.1</li> <li>WooCommerce 5.6.0-rc.1</li> <li>WooCommerce 5.6.0-rc.2</li> <li>WooCommerce 5.6.1</li> <li>WooCommerce 5.6.2</li> <li>WooCommerce 5.6.3</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Mon, 25 Oct 2021 07:49:42 GMTWooCommerce4646<p>Several elements in the admin main view are not properly sanitized against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.2.3</li> <li>WooCommerce 5.2.4</li> <li>WooCommerce 5.2.5</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.3.1</li> <li>WooCommerce 5.3.2</li> <li>WooCommerce 5.3.3</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.4.2</li> <li>WooCommerce 5.4.3</li> <li>WooCommerce 5.4.4</li> <li>WooCommerce 5.4.5</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce 5.5.1</li> <li>WooCommerce 5.5.2</li> <li>WooCommerce 5.5.3</li> <li>WooCommerce 5.5.4</li> <li>WooCommerce 5.5.5</li> <li>WooCommerce 5.6.0</li> <li>WooCommerce 5.6.0-beta.1</li> <li>WooCommerce 5.6.0-rc.1</li> <li>WooCommerce 5.6.0-rc.2</li> <li>WooCommerce 5.6.1</li> <li>WooCommerce 5.6.2</li> <li>WooCommerce 5.6.3</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Tue, 26 Oct 2021 09:54:24 GMTWooCommerce4645<p>Attributes are not checked for JavaScript which can lead to code injection.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> </ul> Thu, 28 Oct 2021 09:19:02 GMTMagento4647<p>The time format within the REST API is not properly sanitized to avoid XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack pr-update-to</li> </ul> Mon, 01 Nov 2021 10:06:03 GMTJetpack4494<p>User isn't correctly checked for permission when managing attachment image. This can lead to arbitrarily file uploading.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 2.1.0</li> <li>WooCommerce 2.1.0-RC1</li> <li>WooCommerce 2.1.0-RC2</li> <li>WooCommerce 2.1.1</li> <li>WooCommerce 2.1.2</li> <li>WooCommerce 2.1.3</li> <li>WooCommerce 2.1.4</li> <li>WooCommerce 2.1.5</li> <li>WooCommerce 2.1.6</li> <li>WooCommerce 2.1.7</li> <li>WooCommerce 2.1.8</li> <li>WooCommerce 2.1.9</li> <li>WooCommerce 2.1.10</li> <li>WooCommerce 2.1.11</li> <li>WooCommerce 2.1.12</li> <li>WooCommerce 2.2.0</li> <li>WooCommerce 2.2.0-RC1</li> <li>WooCommerce 2.2.1</li> <li>WooCommerce 2.2.2</li> <li>WooCommerce 2.2.3</li> <li>WooCommerce 2.2.4</li> <li>WooCommerce 2.2.5</li> <li>WooCommerce 2.2.6</li> <li>WooCommerce 2.2.7</li> <li>WooCommerce 2.2.8</li> <li>WooCommerce 2.2.9</li> <li>WooCommerce 2.2.10</li> <li>WooCommerce 2.2.11</li> <li>WooCommerce 2.3.0</li> <li>WooCommerce 2.3.0-RC1</li> <li>WooCommerce 2.3.1</li> <li>WooCommerce 2.3.2</li> <li>WooCommerce 2.3.3</li> <li>WooCommerce 2.3.4</li> <li>WooCommerce 2.3.5</li> <li>WooCommerce 2.3.6</li> <li>WooCommerce 2.3.7</li> <li>WooCommerce 2.3.8</li> <li>WooCommerce 2.3.9</li> <li>WooCommerce 2.3.10</li> <li>WooCommerce 2.3.11</li> <li>WooCommerce 2.3.12</li> <li>WooCommerce 2.3.13</li> <li>WooCommerce 2.4.0</li> <li>WooCommerce 2.4.0-RC1</li> <li>WooCommerce 2.4.1</li> <li>WooCommerce 2.4.2</li> <li>WooCommerce 2.4.3</li> <li>WooCommerce 2.4.4</li> <li>WooCommerce 2.4.5</li> <li>WooCommerce 2.4.6</li> <li>WooCommerce 2.4.7</li> <li>WooCommerce 2.4.8</li> <li>WooCommerce 2.4.9</li> <li>WooCommerce 2.4.10</li> <li>WooCommerce 2.4.11</li> <li>WooCommerce 2.4.12</li> <li>WooCommerce 2.4.13</li> <li>WooCommerce 2.5.0</li> <li>WooCommerce 2.5.0-RC1</li> <li>WooCommerce 2.5.0-RC2</li> <li>WooCommerce 2.5.0-RC3</li> <li>WooCommerce 2.5.1</li> <li>WooCommerce 2.5.2</li> <li>WooCommerce 2.5.3</li> <li>WooCommerce 2.5.4</li> <li>WooCommerce 2.5.5</li> <li>WooCommerce 2.6.0</li> <li>WooCommerce 2.6.0-RC1</li> <li>WooCommerce 2.6.0-RC2</li> <li>WooCommerce 2.6.1</li> <li>WooCommerce 2.6.2</li> <li>WooCommerce 2.6.3</li> <li>WooCommerce 2.6.4</li> <li>WooCommerce 2.6.5</li> <li>WooCommerce 2.6.6</li> <li>WooCommerce 2.6.7</li> <li>WooCommerce 2.6.8</li> <li>WooCommerce 2.6.9</li> <li>WooCommerce 2.6.10</li> <li>WooCommerce 2.6.11</li> <li>WooCommerce 2.6.12</li> <li>WooCommerce 2.6.13</li> <li>WooCommerce 2.6.14</li> <li>WooCommerce 2.7.0-RC1</li> <li>WooCommerce 3.0.0</li> <li>WooCommerce 3.0.0-rc.1</li> <li>WooCommerce 3.0.0-rc.2</li> <li>WooCommerce 3.0.1</li> <li>WooCommerce 3.0.2</li> <li>WooCommerce 3.0.3</li> <li>WooCommerce 3.0.4</li> <li>WooCommerce 3.0.5</li> <li>WooCommerce 3.0.6</li> <li>WooCommerce 3.0.7</li> <li>WooCommerce 3.0.8</li> <li>WooCommerce 3.0.9</li> <li>WooCommerce 3.1.0</li> <li>WooCommerce 3.1.0-rc.1</li> <li>WooCommerce 3.1.0-rc.2</li> <li>WooCommerce 3.1.1</li> <li>WooCommerce 3.1.2</li> <li>WooCommerce 3.2.0</li> <li>WooCommerce 3.2.0-rc.1</li> <li>WooCommerce 3.2.0-rc.2</li> <li>WooCommerce 3.2.1</li> <li>WooCommerce 3.2.2</li> <li>WooCommerce 3.2.3</li> <li>WooCommerce 3.2.4</li> <li>WooCommerce 3.2.5</li> <li>WooCommerce 3.2.6</li> <li>WooCommerce 3.3.0</li> <li>WooCommerce 3.3.0-rc.1</li> <li>WooCommerce 3.3.0-rc.2</li> <li>WooCommerce 3.3.1</li> <li>WooCommerce 3.3.1-rc.1</li> <li>WooCommerce 3.3.2</li> <li>WooCommerce 3.3.2-rc.1</li> <li>WooCommerce 3.3.3</li> <li>WooCommerce 3.3.4</li> <li>WooCommerce 3.3.5</li> <li>WooCommerce 3.3.6</li> <li>WooCommerce 3.4.0</li> <li>WooCommerce 3.4.0-beta.1</li> <li>WooCommerce 3.4.0-rc.1</li> <li>WooCommerce 3.4.0-rc.2</li> <li>WooCommerce 3.4.1</li> <li>WooCommerce 3.4.2</li> <li>WooCommerce 3.4.3</li> <li>WooCommerce 3.4.4</li> <li>WooCommerce 3.4.5</li> <li>WooCommerce 3.4.6</li> <li>WooCommerce 3.4.7</li> <li>WooCommerce 3.4.8</li> <li>WooCommerce 3.5.0</li> <li>WooCommerce 3.5.0-beta.1</li> <li>WooCommerce 3.5.0-rc.1</li> <li>WooCommerce 3.5.0-rc.2</li> <li>WooCommerce 3.5.1</li> <li>WooCommerce 3.5.10</li> <li>WooCommerce 3.5.2</li> <li>WooCommerce 3.5.3</li> <li>WooCommerce 3.5.4</li> <li>WooCommerce 3.5.5</li> <li>WooCommerce 3.5.6</li> <li>WooCommerce 3.5.7</li> <li>WooCommerce 3.5.8</li> <li>WooCommerce 3.5.9</li> <li>WooCommerce 3.6.0</li> <li>WooCommerce 3.6.0-beta.1</li> <li>WooCommerce 3.6.0-rc.1</li> <li>WooCommerce 3.6.0-rc.2</li> <li>WooCommerce 3.6.0-rc.3</li> <li>WooCommerce 3.6.1</li> <li>WooCommerce 3.6.2</li> <li>WooCommerce 3.6.3</li> <li>WooCommerce 3.6.4</li> <li>WooCommerce 3.6.5</li> <li>WooCommerce 3.6.6</li> <li>WooCommerce 3.6.7</li> <li>WooCommerce 3.7.0</li> <li>WooCommerce 3.7.0-beta.1</li> <li>WooCommerce 3.7.0-rc.1</li> <li>WooCommerce 3.7.0-rc.2</li> <li>WooCommerce 3.7.1</li> <li>WooCommerce 3.7.2</li> <li>WooCommerce 3.7.3</li> <li>WooCommerce 3.8.0</li> <li>WooCommerce 3.8.0-beta.1</li> <li>WooCommerce 3.8.0-rc.1</li> <li>WooCommerce 3.8.0-rc.2</li> <li>WooCommerce 3.8.1</li> <li>WooCommerce 3.8.2</li> <li>WooCommerce 3.8.3</li> <li>WooCommerce 3.9.0</li> <li>WooCommerce 3.9.0-beta.1</li> <li>WooCommerce 3.9.0-beta.2</li> <li>WooCommerce 3.9.0-rc.1</li> <li>WooCommerce 3.9.0-rc.2</li> <li>WooCommerce 3.9.0-rc.3</li> <li>WooCommerce 3.9.0-rc.4</li> <li>WooCommerce 3.9.1</li> <li>WooCommerce 3.9.2</li> <li>WooCommerce 3.9.3</li> <li>WooCommerce 3.9.4</li> <li>WooCommerce 3.9.5</li> <li>WooCommerce 4.0.0</li> <li>WooCommerce 4.0.0-beta.1</li> <li>WooCommerce 4.0.0-rc.1</li> <li>WooCommerce 4.0.0-rc.2</li> <li>WooCommerce 4.0.1</li> <li>WooCommerce 4.0.2</li> <li>WooCommerce 4.0.3</li> <li>WooCommerce 4.0.4</li> <li>WooCommerce 4.1.0</li> <li>WooCommerce 4.1.0-beta.1</li> <li>WooCommerce 4.1.0-beta.2</li> <li>WooCommerce 4.1.0-rc.1</li> <li>WooCommerce 4.1.0-rc.2</li> <li>WooCommerce 4.1.0-rc.3</li> <li>WooCommerce 4.1.1</li> <li>WooCommerce 4.1.2</li> <li>WooCommerce 4.1.2.1</li> <li>WooCommerce 4.1.3</li> <li>WooCommerce 4.1.4</li> <li>WooCommerce 4.2.0</li> <li>WooCommerce 4.2.0-beta.1</li> <li>WooCommerce 4.2.0-RC.1</li> <li>WooCommerce 4.2.0-RC.2</li> <li>WooCommerce 4.2.1</li> <li>WooCommerce 4.2.2</li> <li>WooCommerce 4.2.3</li> <li>WooCommerce 4.2.3.1</li> <li>WooCommerce 4.2.4</li> <li>WooCommerce 4.2.5</li> <li>WooCommerce 4.3.0</li> <li>WooCommerce 4.3.0-beta.1</li> <li>WooCommerce 4.3.0-rc.1</li> <li>WooCommerce 4.3.0-rc.2</li> <li>WooCommerce 4.3.0-rc.3</li> <li>WooCommerce 4.3.1</li> <li>WooCommerce 4.3.2</li> <li>WooCommerce 4.3.3</li> <li>WooCommerce 4.3.4</li> <li>WooCommerce 4.3.4.1</li> <li>WooCommerce 4.3.5</li> <li>WooCommerce 4.3.6</li> <li>WooCommerce 4.4.0</li> <li>WooCommerce 4.4.0-beta.1</li> <li>WooCommerce 4.4.0-rc.1</li> <li>WooCommerce 4.4.1</li> <li>WooCommerce 4.4.2</li> <li>WooCommerce 4.4.2.1</li> <li>WooCommerce 4.4.3</li> <li>WooCommerce 4.4.4</li> <li>WooCommerce 4.5.0</li> <li>WooCommerce 4.5.0-beta.1</li> <li>WooCommerce 4.5.0-rc.1</li> <li>WooCommerce 4.5.0-rc.2</li> <li>WooCommerce 4.5.0-rc.3</li> <li>WooCommerce 4.5.1</li> <li>WooCommerce 4.5.2</li> <li>WooCommerce 4.5.3</li> <li>WooCommerce 4.5.3.1</li> <li>WooCommerce 4.5.4</li> <li>WooCommerce 4.5.5</li> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.2.3</li> <li>WooCommerce 5.2.4</li> <li>WooCommerce 5.2.5</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.3.1</li> <li>WooCommerce 5.3.2</li> <li>WooCommerce 5.3.3</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.4.2</li> <li>WooCommerce 5.4.3</li> <li>WooCommerce 5.4.4</li> <li>WooCommerce 5.4.5</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce 5.5.1</li> <li>WooCommerce 5.5.2</li> <li>WooCommerce 5.5.3</li> <li>WooCommerce 5.5.4</li> <li>WooCommerce 5.5.5</li> <li>WooCommerce 5.6.0</li> <li>WooCommerce 5.6.0-beta.1</li> <li>WooCommerce 5.6.0-rc.1</li> <li>WooCommerce 5.6.0-rc.2</li> <li>WooCommerce 5.6.1</li> <li>WooCommerce 5.6.2</li> <li>WooCommerce 5.6.3</li> <li>WooCommerce list</li> <li>WooCommerce nightly</li> </ul> Mon, 01 Nov 2021 11:56:55 GMTWooCommerce4650<p>The product rule controller isn't properly escaped against XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.6.0.2</li> <li>PrestaShop 1.6.0.2 alpha 2</li> <li>PrestaShop 1.6.0.3</li> <li>PrestaShop 1.6.0.3 beta 1</li> <li>PrestaShop 1.6.0.4</li> <li>PrestaShop 1.6.0.4 RC1</li> <li>PrestaShop 1.6.0.5</li> <li>PrestaShop 1.6.0.6</li> <li>PrestaShop 1.6.0.7</li> <li>PrestaShop 1.6.0.8</li> <li>PrestaShop 1.6.0.9</li> <li>PrestaShop 1.6.0.10</li> <li>PrestaShop 1.6.0.11</li> <li>PrestaShop 1.6.0.12</li> <li>PrestaShop 1.6.0.13</li> <li>PrestaShop 1.6.0.14</li> <li>PrestaShop 1.6.1.0</li> <li>PrestaShop 1.6.1.0 RC4</li> <li>PrestaShop 1.6.1.0 RC5</li> <li>PrestaShop 1.6.1.1</li> <li>PrestaShop 1.6.1.1 RC1</li> <li>PrestaShop 1.6.1.1 RC2</li> <li>PrestaShop 1.6.1.2</li> <li>PrestaShop 1.6.1.2 RC1</li> <li>PrestaShop 1.6.1.2 RC2</li> <li>PrestaShop 1.6.1.2 RC3</li> <li>PrestaShop 1.6.1.2 RC4</li> <li>PrestaShop 1.6.1.3</li> <li>PrestaShop 1.6.1.3 RC1</li> <li>PrestaShop 1.6.1.4</li> <li>PrestaShop 1.6.1.5</li> <li>PrestaShop 1.6.1.6</li> <li>PrestaShop 1.6.1.7</li> <li>PrestaShop 1.6.1.8</li> <li>PrestaShop 1.6.1.9</li> <li>PrestaShop 1.6.1.10</li> <li>PrestaShop 1.6.1.11</li> <li>PrestaShop 1.6.1.11 beta 1</li> <li>PrestaShop 1.6.1.12</li> <li>PrestaShop 1.6.1.13</li> <li>PrestaShop 1.6.1.14</li> <li>PrestaShop 1.6.1.15</li> <li>PrestaShop 1.6.1.16</li> <li>PrestaShop 1.6.1.17</li> <li>PrestaShop 1.6.1.18</li> <li>PrestaShop 1.6.1.19</li> <li>PrestaShop 1.6.1.20</li> <li>PrestaShop 1.6.1.21</li> <li>PrestaShop 1.6.1.22</li> <li>PrestaShop 1.6.1.23</li> <li>PrestaShop 1.6.1.24</li> <li>PrestaShop 1.7.0.0</li> <li>PrestaShop 1.7.0.0 alpha3</li> <li>PrestaShop 1.7.0.0 alpha4</li> <li>PrestaShop 1.7.0.0 beta1</li> <li>PrestaShop 1.7.0.0 beta2</li> <li>PrestaShop 1.7.0.0 beta3</li> <li>PrestaShop 1.7.0.0 RC0</li> <li>PrestaShop 1.7.0.0 RC1</li> <li>PrestaShop 1.7.0.0 RC2</li> <li>PrestaShop 1.7.0.0 RC3</li> <li>PrestaShop 1.7.0.1</li> <li>PrestaShop 1.7.0.2</li> <li>PrestaShop 1.7.0.3</li> <li>PrestaShop 1.7.0.4</li> <li>PrestaShop 1.7.0.5</li> <li>PrestaShop 1.7.0.6</li> <li>PrestaShop 1.7.1.0</li> <li>PrestaShop 1.7.1.0 beta1</li> <li>PrestaShop 1.7.1.1</li> <li>PrestaShop 1.7.1.2</li> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> <li>PrestaShop 1.7.6.9</li> <li>PrestaShop 1.7.7.0</li> <li>PrestaShop 1.7.7.0 beta 1</li> <li>PrestaShop 1.7.7.0 beta 2</li> <li>PrestaShop 1.7.7.0 RC 1</li> <li>PrestaShop 1.7.7.1</li> <li>PrestaShop 1.7.7.2</li> <li>PrestaShop 1.7.7.3</li> <li>PrestaShop 1.7.7.4</li> <li>PrestaShop 1.7.7.5</li> <li>PrestaShop 1.7.7.6</li> <li>PrestaShop 1.7.7.7</li> <li>PrestaShop 1.7.7.8</li> <li>PrestaShop 1.7.7.8 1</li> <li>PrestaShop show</li> </ul> Mon, 08 Nov 2021 07:55:14 GMTPrestaShop4651<p>Form and email body aren't correctly escaped for HTML which can lead to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 4.7</li> <li>Contact Form 7 4.8</li> <li>Contact Form 7 4.8.1</li> <li>Contact Form 7 4.9</li> <li>Contact Form 7 4.9.1</li> <li>Contact Form 7 4.9.2</li> <li>Contact Form 7 5.0</li> <li>Contact Form 7 5.0.1</li> <li>Contact Form 7 5.0.2</li> <li>Contact Form 7 5.0.3</li> <li>Contact Form 7 5.0.4</li> <li>Contact Form 7 5.0.5</li> <li>Contact Form 7 5.1</li> <li>Contact Form 7 5.1.1</li> <li>Contact Form 7 5.1.2</li> <li>Contact Form 7 5.1.3</li> <li>Contact Form 7 5.1.4</li> <li>Contact Form 7 5.1.5</li> <li>Contact Form 7 5.1.6</li> <li>Contact Form 7 5.1.7</li> <li>Contact Form 7 5.1.8</li> <li>Contact Form 7 5.1.9</li> <li>Contact Form 7 5.2</li> <li>Contact Form 7 5.2.1</li> <li>Contact Form 7 5.2.2</li> <li>Contact Form 7 5.3</li> <li>Contact Form 7 5.3.1</li> <li>Contact Form 7 5.3.2</li> <li>Contact Form 7 5.4</li> <li>Contact Form 7 5.4.1</li> <li>Contact Form 7 5.4.2</li> </ul> Tue, 16 Nov 2021 08:39:29 GMTContact Form 74653<p>Unit tag in setup meta data isn't properly escaped and can lead to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Contact Form 7 5.2</li> <li>Contact Form 7 5.2.1</li> <li>Contact Form 7 5.2.2</li> <li>Contact Form 7 5.3</li> <li>Contact Form 7 5.3.1</li> <li>Contact Form 7 5.3.2</li> <li>Contact Form 7 5.4</li> <li>Contact Form 7 5.4.1</li> <li>Contact Form 7 5.4.2</li> </ul> Tue, 16 Nov 2021 08:39:29 GMTContact Form 74655<p>The currency and tax rule data isn't correctly escaped which can lead to XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.2.0</li> <li>PrestaShop 1.7.2.0 RC 1</li> <li>PrestaShop 1.7.2.1</li> <li>PrestaShop 1.7.2.2</li> <li>PrestaShop 1.7.2.3</li> <li>PrestaShop 1.7.2.4</li> <li>PrestaShop 1.7.2.5</li> <li>PrestaShop 1.7.3.0</li> <li>PrestaShop 1.7.3.0 beta 1</li> <li>PrestaShop 1.7.3.0 RC 1</li> <li>PrestaShop 1.7.3.1</li> <li>PrestaShop 1.7.3.2</li> <li>PrestaShop 1.7.3.3</li> <li>PrestaShop 1.7.3.4</li> <li>PrestaShop 1.7.4.0</li> <li>PrestaShop 1.7.4.0 beta 1</li> <li>PrestaShop 1.7.4.1</li> <li>PrestaShop 1.7.4.2</li> <li>PrestaShop 1.7.4.3</li> <li>PrestaShop 1.7.4.4</li> <li>PrestaShop 1.7.5.0</li> <li>PrestaShop 1.7.5.0 beta 1</li> <li>PrestaShop 1.7.5.0 RC 1</li> <li>PrestaShop 1.7.5.1</li> <li>PrestaShop 1.7.5.2</li> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> <li>PrestaShop 1.7.6.9</li> <li>PrestaShop 1.7.7.0</li> <li>PrestaShop 1.7.7.0 beta 1</li> <li>PrestaShop 1.7.7.0 beta 2</li> <li>PrestaShop 1.7.7.0 RC 1</li> <li>PrestaShop 1.7.7.1</li> <li>PrestaShop 1.7.7.2</li> <li>PrestaShop 1.7.7.3</li> <li>PrestaShop 1.7.7.4</li> <li>PrestaShop 1.7.7.5</li> <li>PrestaShop 1.7.7.6</li> <li>PrestaShop 1.7.7.7</li> <li>PrestaShop 1.7.7.8</li> <li>PrestaShop 1.7.7.8 1</li> <li>PrestaShop 1.7.8.0 beta 1</li> <li>PrestaShop show</li> </ul> Wed, 24 Nov 2021 08:52:11 GMTPrestaShop4658<p>Several attribute values aren't correctly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 0.74.0-beta9</li> <li>Magento 0.74.0-beta10</li> <li>Magento 0.74.0-beta11</li> <li>Magento 0.74.0-beta12</li> <li>Magento 0.74.0-beta13</li> <li>Magento 0.74.0-beta14</li> <li>Magento 0.74.0-beta15</li> <li>Magento 0.74.0-beta16</li> <li>Magento 1.0.0-beta</li> <li>Magento 1.0.0-beta2</li> <li>Magento 1.0.0-beta3</li> <li>Magento 1.0.0-beta4</li> <li>Magento 1.0.0-beta5</li> <li>Magento 1.0.0-beta6</li> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.3.7</li> <li>Magento 2.3.7-p1</li> <li>Magento 2.3.7-p2</li> <li>Magento 2.3.7-p3</li> <li>Magento 2.3.7-p4</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> <li>Magento 2.4.2-p1</li> <li>Magento 2.4.2-p2</li> </ul> Tue, 07 Dec 2021 08:25:56 GMTMagento4662<p>Blind SQLi using Search filters with orderBy and sortOrder parameters.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>PrestaShop 1.7.6.0</li> <li>PrestaShop 1.7.6.0 beta 1</li> <li>PrestaShop 1.7.6.0 RC 1</li> <li>PrestaShop 1.7.6.0 RC 2</li> <li>PrestaShop 1.7.6.1</li> <li>PrestaShop 1.7.6.2</li> <li>PrestaShop 1.7.6.3</li> <li>PrestaShop 1.7.6.4</li> <li>PrestaShop 1.7.6.4 1</li> <li>PrestaShop 1.7.6.5</li> <li>PrestaShop 1.7.6.5 1</li> <li>PrestaShop 1.7.6.6</li> <li>PrestaShop 1.7.6.7</li> <li>PrestaShop 1.7.6.8</li> <li>PrestaShop 1.7.6.9</li> <li>PrestaShop 1.7.7.0</li> <li>PrestaShop 1.7.7.0 beta 1</li> <li>PrestaShop 1.7.7.0 beta 2</li> <li>PrestaShop 1.7.7.0 RC 1</li> <li>PrestaShop 1.7.7.1</li> <li>PrestaShop 1.7.7.2</li> <li>PrestaShop 1.7.7.3</li> <li>PrestaShop 1.7.7.4</li> <li>PrestaShop 1.7.7.5</li> <li>PrestaShop 1.7.7.6</li> <li>PrestaShop 1.7.7.7</li> <li>PrestaShop 1.7.7.8</li> <li>PrestaShop 1.7.7.8 1</li> <li>PrestaShop 1.7.8.0</li> <li>PrestaShop 1.7.8.0 beta 1</li> <li>PrestaShop 1.7.8.0 1</li> <li>PrestaShop 1.7.8.0 RC 1</li> <li>PrestaShop 1.7.8.1</li> <li>PrestaShop show</li> </ul> Tue, 14 Dec 2021 08:04:35 GMTPrestaShop4666<p>The billing template of the multi-shipping module is not properly escaped against XSS.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Wed, 15 Dec 2021 14:28:58 GMTMagento4667<p>File upload in some directories are not properly handled which can lead to file upload bypass.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> </ul> Mon, 03 Jan 2022 13:32:55 GMTMagento4663<p>ASCII characters in post slugs is not encoded correctly which can lead to XSS</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.11</li> <li>WordPress 5.2.12</li> <li>WordPress 5.2.13</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.10</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.3.8</li> <li>WordPress 5.3.9</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.4.6</li> <li>WordPress 5.4.7</li> <li>WordPress 5.4.8</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.5.5</li> <li>WordPress 5.5.6</li> <li>WordPress 5.5.7</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.6.4</li> <li>WordPress 5.6.5</li> <li>WordPress 5.6.6</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> <li>WordPress 5.7.2</li> <li>WordPress 5.7.3</li> <li>WordPress 5.7.4</li> <li>WordPress 5.8</li> <li>WordPress 5.8.1</li> <li>WordPress 5.8.2</li> </ul> Tue, 11 Jan 2022 19:11:45 GMTWordPress4705<p>The multisite installation of WordPress is not properly sanitized to prevent object injection via the upgrade process.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.11</li> <li>WordPress 5.2.12</li> <li>WordPress 5.2.13</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.10</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.3.8</li> <li>WordPress 5.3.9</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.4.6</li> <li>WordPress 5.4.7</li> <li>WordPress 5.4.8</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.5.5</li> <li>WordPress 5.5.6</li> <li>WordPress 5.5.7</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.6.4</li> <li>WordPress 5.6.5</li> <li>WordPress 5.6.6</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> <li>WordPress 5.7.2</li> <li>WordPress 5.7.3</li> <li>WordPress 5.7.4</li> <li>WordPress 5.8</li> <li>WordPress 5.8.1</li> <li>WordPress 5.8.2</li> </ul> Tue, 11 Jan 2022 19:11:45 GMTWordPress4706<p>Missing sanitization can lead to SQL injection in WP_Meta_Query</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.11</li> <li>WordPress 5.2.12</li> <li>WordPress 5.2.13</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.10</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.3.8</li> <li>WordPress 5.3.9</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.4.6</li> <li>WordPress 5.4.7</li> <li>WordPress 5.4.8</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.5.5</li> <li>WordPress 5.5.6</li> <li>WordPress 5.5.7</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.6.4</li> <li>WordPress 5.6.5</li> <li>WordPress 5.6.6</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> <li>WordPress 5.7.2</li> <li>WordPress 5.7.3</li> <li>WordPress 5.7.4</li> <li>WordPress 5.8</li> <li>WordPress 5.8.1</li> <li>WordPress 5.8.2</li> </ul> Tue, 11 Jan 2022 19:11:45 GMTWordPress4708<p>Missing sanitization can lead to SQL injection in WP_Tax_Query</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WordPress 3.6</li> <li>WordPress 3.6.1</li> <li>WordPress 3.7</li> <li>WordPress 3.7.1</li> <li>WordPress 3.7.2</li> <li>WordPress 3.7.3</li> <li>WordPress 3.7.4</li> <li>WordPress 3.7.5</li> <li>WordPress 3.7.6</li> <li>WordPress 3.7.7</li> <li>WordPress 3.7.8</li> <li>WordPress 3.7.9</li> <li>WordPress 3.7.10</li> <li>WordPress 3.7.11</li> <li>WordPress 3.7.12</li> <li>WordPress 3.7.13</li> <li>WordPress 3.7.14</li> <li>WordPress 3.7.15</li> <li>WordPress 3.7.16</li> <li>WordPress 3.7.17</li> <li>WordPress 3.7.18</li> <li>WordPress 3.7.19</li> <li>WordPress 3.7.20</li> <li>WordPress 3.7.21</li> <li>WordPress 3.7.22</li> <li>WordPress 3.7.23</li> <li>WordPress 3.7.24</li> <li>WordPress 3.7.25</li> <li>WordPress 3.7.26</li> <li>WordPress 3.7.27</li> <li>WordPress 3.7.28</li> <li>WordPress 3.7.29</li> <li>WordPress 3.7.30</li> <li>WordPress 3.7.31</li> <li>WordPress 3.7.32</li> <li>WordPress 3.7.33</li> <li>WordPress 3.7.34</li> <li>WordPress 3.7.35</li> <li>WordPress 3.7.36</li> <li>WordPress 3.8</li> <li>WordPress 3.8.1</li> <li>WordPress 3.8.2</li> <li>WordPress 3.8.3</li> <li>WordPress 3.8.4</li> <li>WordPress 3.8.5</li> <li>WordPress 3.8.6</li> <li>WordPress 3.8.7</li> <li>WordPress 3.8.8</li> <li>WordPress 3.8.9</li> <li>WordPress 3.8.10</li> <li>WordPress 3.8.11</li> <li>WordPress 3.8.12</li> <li>WordPress 3.8.13</li> <li>WordPress 3.8.14</li> <li>WordPress 3.8.15</li> <li>WordPress 3.8.16</li> <li>WordPress 3.8.17</li> <li>WordPress 3.8.18</li> <li>WordPress 3.8.19</li> <li>WordPress 3.8.20</li> <li>WordPress 3.8.21</li> <li>WordPress 3.8.22</li> <li>WordPress 3.8.23</li> <li>WordPress 3.8.24</li> <li>WordPress 3.8.25</li> <li>WordPress 3.8.26</li> <li>WordPress 3.8.27</li> <li>WordPress 3.8.28</li> <li>WordPress 3.8.29</li> <li>WordPress 3.8.30</li> <li>WordPress 3.8.31</li> <li>WordPress 3.8.32</li> <li>WordPress 3.8.33</li> <li>WordPress 3.8.34</li> <li>WordPress 3.8.35</li> <li>WordPress 3.8.36</li> <li>WordPress 3.9</li> <li>WordPress 3.9.1</li> <li>WordPress 3.9.2</li> <li>WordPress 3.9.3</li> <li>WordPress 3.9.4</li> <li>WordPress 3.9.5</li> <li>WordPress 3.9.6</li> <li>WordPress 3.9.7</li> <li>WordPress 3.9.8</li> <li>WordPress 3.9.9</li> <li>WordPress 3.9.10</li> <li>WordPress 3.9.11</li> <li>WordPress 3.9.12</li> <li>WordPress 3.9.13</li> <li>WordPress 3.9.14</li> <li>WordPress 3.9.15</li> <li>WordPress 3.9.16</li> <li>WordPress 3.9.17</li> <li>WordPress 3.9.18</li> <li>WordPress 3.9.19</li> <li>WordPress 3.9.20</li> <li>WordPress 3.9.21</li> <li>WordPress 3.9.22</li> <li>WordPress 3.9.23</li> <li>WordPress 3.9.24</li> <li>WordPress 3.9.25</li> <li>WordPress 3.9.26</li> <li>WordPress 3.9.27</li> <li>WordPress 3.9.28</li> <li>WordPress 3.9.29</li> <li>WordPress 3.9.30</li> <li>WordPress 3.9.31</li> <li>WordPress 3.9.32</li> <li>WordPress 3.9.33</li> <li>WordPress 3.9.34</li> <li>WordPress 4.0</li> <li>WordPress 4.0.1</li> <li>WordPress 4.0.2</li> <li>WordPress 4.0.3</li> <li>WordPress 4.0.4</li> <li>WordPress 4.0.5</li> <li>WordPress 4.0.6</li> <li>WordPress 4.0.7</li> <li>WordPress 4.0.8</li> <li>WordPress 4.0.9</li> <li>WordPress 4.0.10</li> <li>WordPress 4.0.11</li> <li>WordPress 4.0.12</li> <li>WordPress 4.0.13</li> <li>WordPress 4.0.14</li> <li>WordPress 4.0.15</li> <li>WordPress 4.0.16</li> <li>WordPress 4.0.17</li> <li>WordPress 4.0.18</li> <li>WordPress 4.0.19</li> <li>WordPress 4.0.20</li> <li>WordPress 4.0.21</li> <li>WordPress 4.0.22</li> <li>WordPress 4.0.23</li> <li>WordPress 4.0.24</li> <li>WordPress 4.0.25</li> <li>WordPress 4.0.26</li> <li>WordPress 4.0.27</li> <li>WordPress 4.0.28</li> <li>WordPress 4.0.29</li> <li>WordPress 4.0.30</li> <li>WordPress 4.0.31</li> <li>WordPress 4.0.32</li> <li>WordPress 4.0.33</li> <li>WordPress 4.1</li> <li>WordPress 4.1.1</li> <li>WordPress 4.1.2</li> <li>WordPress 4.1.3</li> <li>WordPress 4.1.4</li> <li>WordPress 4.1.5</li> <li>WordPress 4.1.6</li> <li>WordPress 4.1.7</li> <li>WordPress 4.1.8</li> <li>WordPress 4.1.9</li> <li>WordPress 4.1.10</li> <li>WordPress 4.1.11</li> <li>WordPress 4.1.12</li> <li>WordPress 4.1.13</li> <li>WordPress 4.1.14</li> <li>WordPress 4.1.15</li> <li>WordPress 4.1.16</li> <li>WordPress 4.1.17</li> <li>WordPress 4.1.18</li> <li>WordPress 4.1.19</li> <li>WordPress 4.1.20</li> <li>WordPress 4.1.21</li> <li>WordPress 4.1.22</li> <li>WordPress 4.1.23</li> <li>WordPress 4.1.24</li> <li>WordPress 4.1.25</li> <li>WordPress 4.1.26</li> <li>WordPress 4.1.27</li> <li>WordPress 4.1.28</li> <li>WordPress 4.1.29</li> <li>WordPress 4.1.30</li> <li>WordPress 4.1.31</li> <li>WordPress 4.1.32</li> <li>WordPress 4.1.33</li> <li>WordPress 4.2</li> <li>WordPress 4.2.1</li> <li>WordPress 4.2.2</li> <li>WordPress 4.2.3</li> <li>WordPress 4.2.4</li> <li>WordPress 4.2.5</li> <li>WordPress 4.2.6</li> <li>WordPress 4.2.7</li> <li>WordPress 4.2.8</li> <li>WordPress 4.2.9</li> <li>WordPress 4.2.10</li> <li>WordPress 4.2.11</li> <li>WordPress 4.2.12</li> <li>WordPress 4.2.13</li> <li>WordPress 4.2.14</li> <li>WordPress 4.2.15</li> <li>WordPress 4.2.16</li> <li>WordPress 4.2.17</li> <li>WordPress 4.2.18</li> <li>WordPress 4.2.19</li> <li>WordPress 4.2.20</li> <li>WordPress 4.2.21</li> <li>WordPress 4.2.22</li> <li>WordPress 4.2.23</li> <li>WordPress 4.2.24</li> <li>WordPress 4.2.25</li> <li>WordPress 4.2.26</li> <li>WordPress 4.2.27</li> <li>WordPress 4.2.28</li> <li>WordPress 4.2.29</li> <li>WordPress 4.2.30</li> <li>WordPress 4.3</li> <li>WordPress 4.3.1</li> <li>WordPress 4.3.2</li> <li>WordPress 4.3.3</li> <li>WordPress 4.3.4</li> <li>WordPress 4.3.10</li> <li>WordPress 4.3.11</li> <li>WordPress 4.3.12</li> <li>WordPress 4.3.13</li> <li>WordPress 4.3.14</li> <li>WordPress 4.3.15</li> <li>WordPress 4.3.16</li> <li>WordPress 4.3.17</li> <li>WordPress 4.3.18</li> <li>WordPress 4.3.19</li> <li>WordPress 4.3.20</li> <li>WordPress 4.3.21</li> <li>WordPress 4.3.22</li> <li>WordPress 4.3.23</li> <li>WordPress 4.3.24</li> <li>WordPress 4.3.25</li> <li>WordPress 4.3.26</li> <li>WordPress 4.3.5</li> <li>WordPress 4.3.6</li> <li>WordPress 4.3.7</li> <li>WordPress 4.3.8</li> <li>WordPress 4.3.9</li> <li>WordPress 4.4</li> <li>WordPress 4.4.1</li> <li>WordPress 4.4.2</li> <li>WordPress 4.4.3</li> <li>WordPress 4.4.4</li> <li>WordPress 4.4.5</li> <li>WordPress 4.4.6</li> <li>WordPress 4.4.7</li> <li>WordPress 4.4.8</li> <li>WordPress 4.4.9</li> <li>WordPress 4.4.10</li> <li>WordPress 4.4.11</li> <li>WordPress 4.4.12</li> <li>WordPress 4.4.13</li> <li>WordPress 4.4.14</li> <li>WordPress 4.4.15</li> <li>WordPress 4.4.16</li> <li>WordPress 4.4.17</li> <li>WordPress 4.4.18</li> <li>WordPress 4.4.19</li> <li>WordPress 4.4.20</li> <li>WordPress 4.4.21</li> <li>WordPress 4.4.22</li> <li>WordPress 4.4.23</li> <li>WordPress 4.4.24</li> <li>WordPress 4.4.25</li> <li>WordPress 4.5</li> <li>WordPress 4.5.1</li> <li>WordPress 4.5.2</li> <li>WordPress 4.5.3</li> <li>WordPress 4.5.4</li> <li>WordPress 4.5.5</li> <li>WordPress 4.5.6</li> <li>WordPress 4.5.7</li> <li>WordPress 4.5.8</li> <li>WordPress 4.5.9</li> <li>WordPress 4.5.10</li> <li>WordPress 4.5.11</li> <li>WordPress 4.5.12</li> <li>WordPress 4.5.13</li> <li>WordPress 4.5.14</li> <li>WordPress 4.5.15</li> <li>WordPress 4.5.16</li> <li>WordPress 4.5.17</li> <li>WordPress 4.5.18</li> <li>WordPress 4.5.19</li> <li>WordPress 4.5.20</li> <li>WordPress 4.5.21</li> <li>WordPress 4.5.22</li> <li>WordPress 4.5.23</li> <li>WordPress 4.5.24</li> <li>WordPress 4.6</li> <li>WordPress 4.6.1</li> <li>WordPress 4.6.2</li> <li>WordPress 4.6.3</li> <li>WordPress 4.6.4</li> <li>WordPress 4.6.5</li> <li>WordPress 4.6.6</li> <li>WordPress 4.6.7</li> <li>WordPress 4.6.8</li> <li>WordPress 4.6.9</li> <li>WordPress 4.6.10</li> <li>WordPress 4.6.11</li> <li>WordPress 4.6.12</li> <li>WordPress 4.6.13</li> <li>WordPress 4.6.14</li> <li>WordPress 4.6.15</li> <li>WordPress 4.6.16</li> <li>WordPress 4.6.17</li> <li>WordPress 4.6.18</li> <li>WordPress 4.6.19</li> <li>WordPress 4.6.20</li> <li>WordPress 4.6.21</li> <li>WordPress 4.7</li> <li>WordPress 4.7.1</li> <li>WordPress 4.7.2</li> <li>WordPress 4.7.3</li> <li>WordPress 4.7.4</li> <li>WordPress 4.7.5</li> <li>WordPress 4.7.6</li> <li>WordPress 4.7.7</li> <li>WordPress 4.7.8</li> <li>WordPress 4.7.9</li> <li>WordPress 4.7.10</li> <li>WordPress 4.7.11</li> <li>WordPress 4.7.12</li> <li>WordPress 4.7.13</li> <li>WordPress 4.7.14</li> <li>WordPress 4.7.15</li> <li>WordPress 4.7.16</li> <li>WordPress 4.7.17</li> <li>WordPress 4.7.18</li> <li>WordPress 4.7.19</li> <li>WordPress 4.7.20</li> <li>WordPress 4.7.21</li> <li>WordPress 4.8</li> <li>WordPress 4.8.1</li> <li>WordPress 4.8.2</li> <li>WordPress 4.8.3</li> <li>WordPress 4.8.4</li> <li>WordPress 4.8.5</li> <li>WordPress 4.8.6</li> <li>WordPress 4.8.7</li> <li>WordPress 4.8.10</li> <li>WordPress 4.8.11</li> <li>WordPress 4.8.12</li> <li>WordPress 4.8.13</li> <li>WordPress 4.8.14</li> <li>WordPress 4.8.15</li> <li>WordPress 4.8.16</li> <li>WordPress 4.8.17</li> <li>WordPress 4.8.8</li> <li>WordPress 4.8.9</li> <li>WordPress 4.9</li> <li>WordPress 4.9.1</li> <li>WordPress 4.9.2</li> <li>WordPress 4.9.3</li> <li>WordPress 4.9.4</li> <li>WordPress 4.9.5</li> <li>WordPress 4.9.6</li> <li>WordPress 4.9.7</li> <li>WordPress 4.9.8</li> <li>WordPress 4.9.9</li> <li>WordPress 4.9.10</li> <li>WordPress 4.9.11</li> <li>WordPress 4.9.12</li> <li>WordPress 4.9.13</li> <li>WordPress 4.9.14</li> <li>WordPress 4.9.15</li> <li>WordPress 4.9.16</li> <li>WordPress 4.9.17</li> <li>WordPress 4.9.18</li> <li>WordPress 5.0</li> <li>WordPress 5.0.1</li> <li>WordPress 5.0.2</li> <li>WordPress 5.0.3</li> <li>WordPress 5.0.4</li> <li>WordPress 5.0.6</li> <li>WordPress 5.0.7</li> <li>WordPress 5.0.8</li> <li>WordPress 5.0.9</li> <li>WordPress 5.0.10</li> <li>WordPress 5.0.11</li> <li>WordPress 5.0.12</li> <li>WordPress 5.0.13</li> <li>WordPress 5.0.14</li> <li>WordPress 5.0 Beta 1</li> <li>WordPress 5.0 Beta 2</li> <li>WordPress 5.0 Beta 3</li> <li>WordPress 5.0 Beta 4</li> <li>WordPress 5.0 RC1</li> <li>WordPress 5.0 RC2</li> <li>WordPress 5.0 RC3</li> <li>WordPress 5.1</li> <li>WordPress 5.1.1</li> <li>WordPress 5.1.10</li> <li>WordPress 5.1.11</li> <li>WordPress 5.1.2</li> <li>WordPress 5.1.3</li> <li>WordPress 5.1.4</li> <li>WordPress 5.1.5</li> <li>WordPress 5.1.6</li> <li>WordPress 5.1.7</li> <li>WordPress 5.1.8</li> <li>WordPress 5.1.9</li> <li>WordPress 5.2</li> <li>WordPress 5.2.1</li> <li>WordPress 5.2.10</li> <li>WordPress 5.2.11</li> <li>WordPress 5.2.12</li> <li>WordPress 5.2.13</li> <li>WordPress 5.2.2</li> <li>WordPress 5.2.3</li> <li>WordPress 5.2.4</li> <li>WordPress 5.2.5</li> <li>WordPress 5.2.6</li> <li>WordPress 5.2.7</li> <li>WordPress 5.2.8</li> <li>WordPress 5.2.9</li> <li>WordPress 5.2 Beta 1</li> <li>WordPress 5.2 Beta 2</li> <li>WordPress 5.3</li> <li>WordPress 5.3.1</li> <li>WordPress 5.3.10</li> <li>WordPress 5.3.2</li> <li>WordPress 5.3.3</li> <li>WordPress 5.3.4</li> <li>WordPress 5.3.5</li> <li>WordPress 5.3.6</li> <li>WordPress 5.3.7</li> <li>WordPress 5.3.8</li> <li>WordPress 5.3.9</li> <li>WordPress 5.4</li> <li>WordPress 5.4.1</li> <li>WordPress 5.4.2</li> <li>WordPress 5.4.3</li> <li>WordPress 5.4.4</li> <li>WordPress 5.4.5</li> <li>WordPress 5.4.6</li> <li>WordPress 5.4.7</li> <li>WordPress 5.4.8</li> <li>WordPress 5.5</li> <li>WordPress 5.5.1</li> <li>WordPress 5.5.2</li> <li>WordPress 5.5.3</li> <li>WordPress 5.5.4</li> <li>WordPress 5.5.5</li> <li>WordPress 5.5.6</li> <li>WordPress 5.5.7</li> <li>WordPress 5.6</li> <li>WordPress 5.6.1</li> <li>WordPress 5.6.2</li> <li>WordPress 5.6.3</li> <li>WordPress 5.6.4</li> <li>WordPress 5.6.5</li> <li>WordPress 5.6.6</li> <li>WordPress 5.7</li> <li>WordPress 5.7.1</li> <li>WordPress 5.7.2</li> <li>WordPress 5.7.3</li> <li>WordPress 5.7.4</li> <li>WordPress 5.8</li> <li>WordPress 5.8.1</li> <li>WordPress 5.8.2</li> </ul> Tue, 11 Jan 2022 19:11:45 GMTWordPress4707<p>Missing check of group ID permissions while creating an account.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.0</li> <li>Magento 2.0.0-rc</li> <li>Magento 2.0.0-rc2</li> <li>Magento 2.0.1</li> <li>Magento 2.0.2</li> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> </ul> Thu, 27 Jan 2022 15:25:09 GMTMagento4704<p>The widget template of the backend module is not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.1</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.3.7</li> <li>Magento 2.3.7-p1</li> <li>Magento 2.3.7-p2</li> <li>Magento 2.3.7-p3</li> <li>Magento 2.3.7-p4</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> </ul> Thu, 27 Jan 2022 15:25:09 GMTMagento4766<p>URL is not escaped properly in search performance logger which can lead to XSS attacks.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 10.0</li> <li>Jetpack 10.0.1</li> <li>Jetpack 10.0.2</li> <li>Jetpack 10.0-beta</li> <li>Jetpack 10.1</li> <li>Jetpack 10.1.1</li> <li>Jetpack 10.1.2</li> <li>Jetpack 10.1-beta</li> <li>Jetpack 10.2</li> <li>Jetpack 10.2.1</li> <li>Jetpack 10.2.2</li> <li>Jetpack 10.2.3</li> <li>Jetpack 10.2-beta</li> <li>Jetpack 10.3</li> <li>Jetpack 10.3.1</li> <li>Jetpack 10.3.2</li> <li>Jetpack 10.3-2110.1</li> <li>Jetpack 10.3-a.1</li> <li>Jetpack 10.3-a.3</li> <li>Jetpack 10.3-beta</li> <li>Jetpack 10.4-a.1</li> <li>Jetpack 10.4-a.3</li> <li>Jetpack 10.4-a.5</li> <li>Jetpack 10.4-a.7</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack 9.8</li> <li>Jetpack 9.8.1</li> <li>Jetpack 9.8.2</li> <li>Jetpack 9.8.3</li> <li>Jetpack 9.8-beta</li> <li>Jetpack 9.9</li> <li>Jetpack 9.9.1</li> <li>Jetpack 9.9.2</li> <li>Jetpack 9.9.3</li> <li>Jetpack 9.9-beta</li> <li>Jetpack pr-update-to</li> </ul> Tue, 01 Feb 2022 08:56:00 GMTJetpack4702<p>The widget layout template is not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.0.3</li> <li>Magento 2.0.4</li> <li>Magento 2.0.5</li> <li>Magento 2.0.6</li> <li>Magento 2.0.7</li> <li>Magento 2.0.8</li> <li>Magento 2.0.9</li> <li>Magento 2.0.10</li> <li>Magento 2.0.11</li> <li>Magento 2.0.12</li> <li>Magento 2.0.13</li> <li>Magento 2.0.14</li> <li>Magento 2.0.15</li> <li>Magento 2.0.16</li> <li>Magento 2.0.17</li> <li>Magento 2.0.18</li> <li>Magento 2.1.0</li> <li>Magento 2.1.0-rc1</li> <li>Magento 2.1.0-rc2</li> <li>Magento 2.1.0-rc3</li> <li>Magento 2.1.1</li> <li>Magento 2.1.2</li> <li>Magento 2.1.3</li> <li>Magento 2.1.4</li> <li>Magento 2.1.5</li> <li>Magento 2.1.6</li> <li>Magento 2.1.7</li> <li>Magento 2.1.8</li> <li>Magento 2.1.9</li> <li>Magento 2.1.10</li> <li>Magento 2.1.11</li> <li>Magento 2.1.12</li> <li>Magento 2.1.13</li> <li>Magento 2.1.14</li> <li>Magento 2.1.15</li> <li>Magento 2.1.16</li> <li>Magento 2.1.17</li> <li>Magento 2.1.18</li> <li>Magento 2.2.0</li> <li>Magento 2.2.0-rc2.0</li> <li>Magento 2.2.0-rc2.1</li> <li>Magento 2.2.0-rc2.2</li> <li>Magento 2.2.0-rc2.3</li> <li>Magento 2.2.0-rc3.0</li> <li>Magento 2.2.0-RC1.2</li> <li>Magento 2.2.0-RC1.3</li> <li>Magento 2.2.0-RC1.4</li> <li>Magento 2.2.0-RC1.5</li> <li>Magento 2.2.0-RC1.6</li> <li>Magento 2.2.0-RC1.8</li> <li>Magento 2.2.1</li> <li>Magento 2.2.2</li> <li>Magento 2.2.3</li> <li>Magento 2.2.4</li> <li>Magento 2.2.5</li> <li>Magento 2.2.6</li> <li>Magento 2.2.7</li> <li>Magento 2.2.8</li> <li>Magento 2.2.9</li> <li>Magento 2.2.10</li> <li>Magento 2.2.11</li> <li>Magento 2.3.0</li> <li>Magento 2.3.1</li> <li>Magento 2.3.2</li> <li>Magento 2.3.2-p1</li> <li>Magento 2.3.2-p2</li> <li>Magento 2.3.3</li> <li>Magento 2.3.3-p1</li> <li>Magento 2.3.4</li> <li>Magento 2.3.4-p2</li> <li>Magento 2.3.5</li> <li>Magento 2.3.5-p1</li> <li>Magento 2.3.5-p2</li> <li>Magento 2.3.6</li> <li>Magento 2.3.6-p1</li> <li>Magento 2.3.7</li> <li>Magento 2.3.7-p1</li> <li>Magento 2.3.7-p2</li> <li>Magento 2.3.7-p3</li> <li>Magento 2.3.7-p4</li> <li>Magento 2.4.0</li> <li>Magento 2.4.0-p1</li> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> </ul> Tue, 01 Feb 2022 15:12:24 GMTMagento4769<p>The coming events of the widgets module is not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 10.0</li> <li>Jetpack 10.0.1</li> <li>Jetpack 10.0.2</li> <li>Jetpack 10.0-beta</li> <li>Jetpack 10.1</li> <li>Jetpack 10.1.1</li> <li>Jetpack 10.1.2</li> <li>Jetpack 10.1-beta</li> <li>Jetpack 10.2</li> <li>Jetpack 10.2.1</li> <li>Jetpack 10.2.2</li> <li>Jetpack 10.2.3</li> <li>Jetpack 10.2-beta</li> <li>Jetpack 10.3</li> <li>Jetpack 10.3.1</li> <li>Jetpack 10.3.2</li> <li>Jetpack 10.3-2110.1</li> <li>Jetpack 10.3-a.1</li> <li>Jetpack 10.3-a.3</li> <li>Jetpack 10.3-beta</li> <li>Jetpack 10.4</li> <li>Jetpack 10.4.1</li> <li>Jetpack 10.4.2</li> <li>Jetpack 10.4-a.1</li> <li>Jetpack 10.4-a.3</li> <li>Jetpack 10.4-a.5</li> <li>Jetpack 10.4-a.7</li> <li>Jetpack 10.4-a.9</li> <li>Jetpack 10.4-beta</li> <li>Jetpack 10.5-a.1</li> <li>Jetpack 10.5-a.3</li> <li>Jetpack 2.9</li> <li>Jetpack 2.9.1</li> <li>Jetpack 2.9.1b1</li> <li>Jetpack 2.9.2</li> <li>Jetpack 2.9.3</li> <li>Jetpack 2.9b1</li> <li>Jetpack 2.9b2</li> <li>Jetpack 2.9b3</li> <li>Jetpack 2.9b4</li> <li>Jetpack 3.0</li> <li>Jetpack 3.0.1</li> <li>Jetpack 3.0.2</li> <li>Jetpack 3.0.2b1</li> <li>Jetpack 3.0.2b2</li> <li>Jetpack 3.1</li> <li>Jetpack 3.1.1</li> <li>Jetpack 3.2</li> <li>Jetpack 3.2.1</li> <li>Jetpack 3.3</li> <li>Jetpack 3.3.1</li> <li>Jetpack 3.3.2</li> <li>Jetpack 3.4</li> <li>Jetpack 3.4.1</li> <li>Jetpack 3.4.2</li> <li>Jetpack 3.5</li> <li>Jetpack 3.5.1</li> <li>Jetpack 3.5.2</li> <li>Jetpack 3.5.3</li> <li>Jetpack 3.6</li> <li>Jetpack 3.6.1</li> <li>Jetpack 3.7</li> <li>Jetpack 3.7.1</li> <li>Jetpack 3.7.2</li> <li>Jetpack 3.8.0</li> <li>Jetpack 3.8.1</li> <li>Jetpack 3.8.2</li> <li>Jetpack 3.9.0</li> <li>Jetpack 3.9.1</li> <li>Jetpack 3.9.2</li> <li>Jetpack 3.9.3</li> <li>Jetpack 3.9.4</li> <li>Jetpack 3.9.5</li> <li>Jetpack 3.9.6</li> <li>Jetpack 4.0.0</li> <li>Jetpack 4.0.1</li> <li>Jetpack 4.0.2</li> <li>Jetpack 4.0.3</li> <li>Jetpack 4.0.4</li> <li>Jetpack 4.1.0</li> <li>Jetpack 4.1.1</li> <li>Jetpack 4.2</li> <li>Jetpack 4.2.0</li> <li>Jetpack 4.2.1</li> <li>Jetpack 4.2.2</li> <li>Jetpack 4.5</li> <li>Jetpack 4.5.1</li> <li>Jetpack 4.5.2</li> <li>Jetpack 4.5.3</li> <li>Jetpack 4.6</li> <li>Jetpack 4.6.1</li> <li>Jetpack 4.6.2</li> <li>Jetpack 4.6.3</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable</li> <li>Jetpack 5.0</li> <li>Jetpack 5.0.1</li> <li>Jetpack 5.0.2</li> <li>Jetpack 5.0.3</li> <li>Jetpack 5.1</li> <li>Jetpack 5.1.1</li> <li>Jetpack 5.1.2</li> <li>Jetpack 5.1.3</li> <li>Jetpack 5.1.4</li> <li>Jetpack 5.2</li> <li>Jetpack 5.2.1</li> <li>Jetpack 5.2.2</li> <li>Jetpack 5.2.3</li> <li>Jetpack 5.2.4</li> <li>Jetpack 5.2.5</li> <li>Jetpack 5.3</li> <li>Jetpack 5.3.1</li> <li>Jetpack 5.3.2</li> <li>Jetpack 5.3.3</li> <li>Jetpack 5.3.4</li> <li>Jetpack 5.4</li> <li>Jetpack 5.4.1</li> <li>Jetpack 5.4.2</li> <li>Jetpack 5.4.3</li> <li>Jetpack 5.4.4</li> <li>Jetpack 5.5</li> <li>Jetpack 5.5.1</li> <li>Jetpack 5.5.2</li> <li>Jetpack 5.5.3</li> <li>Jetpack 5.5.4</li> <li>Jetpack 5.5.5</li> <li>Jetpack 5.5-pressable</li> <li>Jetpack 5.6</li> <li>Jetpack 5.6.1</li> <li>Jetpack 5.6.2</li> <li>Jetpack 5.6.3</li> <li>Jetpack 5.6.4</li> <li>Jetpack 5.6.5</li> <li>Jetpack 5.6-pressable-rewind</li> <li>Jetpack 5.7</li> <li>Jetpack 5.7.1</li> <li>Jetpack 5.7.2</li> <li>Jetpack 5.7.3</li> <li>Jetpack 5.7.4</li> <li>Jetpack 5.7.5</li> <li>Jetpack 5.8</li> <li>Jetpack 5.8.1</li> <li>Jetpack 5.8.2</li> <li>Jetpack 5.8.3</li> <li>Jetpack 5.8.4</li> <li>Jetpack 5.9</li> <li>Jetpack 5.9.1</li> <li>Jetpack 5.9.2</li> <li>Jetpack 5.9.3</li> <li>Jetpack 5.9.4</li> <li>Jetpack 6.0</li> <li>Jetpack 6.0.1</li> <li>Jetpack 6.0.2</li> <li>Jetpack 6.0.3</li> <li>Jetpack 6.0.4</li> <li>Jetpack 6.1</li> <li>Jetpack 6.1.1</li> <li>Jetpack 6.1.2</li> <li>Jetpack 6.1.3</li> <li>Jetpack 6.1.4</li> <li>Jetpack 6.1.5</li> <li>Jetpack 6.2</li> <li>Jetpack 6.2.1</li> <li>Jetpack 6.2.2</li> <li>Jetpack 6.2.3</li> <li>Jetpack 6.2.4</li> <li>Jetpack 6.2.5</li> <li>Jetpack 6.3</li> <li>Jetpack 6.3.1</li> <li>Jetpack 6.3.2</li> <li>Jetpack 6.3.3</li> <li>Jetpack 6.3.4</li> <li>Jetpack 6.3.5</li> <li>Jetpack 6.3.6</li> <li>Jetpack 6.3.7</li> <li>Jetpack 6.4</li> <li>Jetpack 6.4.1</li> <li>Jetpack 6.4.2</li> <li>Jetpack 6.4.3</li> <li>Jetpack 6.4.4</li> <li>Jetpack 6.4.5</li> <li>Jetpack 6.4.6</li> <li>Jetpack 6.5</li> <li>Jetpack 6.5.1</li> <li>Jetpack 6.5.2</li> <li>Jetpack 6.5.3</li> <li>Jetpack 6.5.4</li> <li>Jetpack 6.5-pressable</li> <li>Jetpack 6.5-pressable2</li> <li>Jetpack 6.5-pressable3</li> <li>Jetpack 6.6</li> <li>Jetpack 6.6.1</li> <li>Jetpack 6.6.1-pressable</li> <li>Jetpack 6.6.2</li> <li>Jetpack 6.6.3</li> <li>Jetpack 6.6.4</li> <li>Jetpack 6.6.5</li> <li>Jetpack 6.6-beta</li> <li>Jetpack 6.6-beta2</li> <li>Jetpack 6.7</li> <li>Jetpack 6.7.1</li> <li>Jetpack 6.7.1-beta</li> <li>Jetpack 6.7.2</li> <li>Jetpack 6.7.3</li> <li>Jetpack 6.7.4</li> <li>Jetpack 6.7-beta</li> <li>Jetpack 6.7-beta2</li> <li>Jetpack 6.8</li> <li>Jetpack 6.8.1</li> <li>Jetpack 6.8.2</li> <li>Jetpack 6.8.3</li> <li>Jetpack 6.8.4</li> <li>Jetpack 6.8.5</li> <li>Jetpack 6.8-beta</li> <li>Jetpack 6.8-beta2</li> <li>Jetpack 6.8-beta3</li> <li>Jetpack 6.8-beta4</li> <li>Jetpack 6.8-pressable</li> <li>Jetpack 6.9</li> <li>Jetpack 6.9.1</li> <li>Jetpack 6.9.2</li> <li>Jetpack 6.9.3</li> <li>Jetpack 6.9.4</li> <li>Jetpack 6.9-beta</li> <li>Jetpack 6.9-beta2</li> <li>Jetpack 7.0</li> <li>Jetpack 7.0.1</li> <li>Jetpack 7.0.2</li> <li>Jetpack 7.0.3</li> <li>Jetpack 7.0.4</li> <li>Jetpack 7.0.5</li> <li>Jetpack 7.0-beta</li> <li>Jetpack 7.0-beta2</li> <li>Jetpack 7.1</li> <li>Jetpack 7.1.1</li> <li>Jetpack 7.1.1.1</li> <li>Jetpack 7.1.2</li> <li>Jetpack 7.1.3</li> <li>Jetpack 7.1.4</li> <li>Jetpack 7.1.5</li> <li>Jetpack 7.1-beta</li> <li>Jetpack 7.1-beta2</li> <li>Jetpack 7.2</li> <li>Jetpack 7.2.1</li> <li>Jetpack 7.2.1.1</li> <li>Jetpack 7.2.2</li> <li>Jetpack 7.2.3</li> <li>Jetpack 7.2.4</li> <li>Jetpack 7.2.5</li> <li>Jetpack 7.2-beta1</li> <li>Jetpack 7.2-beta2</li> <li>Jetpack 7.2-beta3</li> <li>Jetpack 7.3</li> <li>Jetpack 7.3.0</li> <li>Jetpack 7.3.0.1</li> <li>Jetpack 7.3.1</li> <li>Jetpack 7.3.1.1</li> <li>Jetpack 7.3.2</li> <li>Jetpack 7.3.3</li> <li>Jetpack 7.3.4</li> <li>Jetpack 7.3.5</li> <li>Jetpack 7.3-beta1</li> <li>Jetpack 7.3-beta2</li> <li>Jetpack 7.4</li> <li>Jetpack 7.4.1</li> <li>Jetpack 7.4.2</li> <li>Jetpack 7.4.3</li> <li>Jetpack 7.4.4</li> <li>Jetpack 7.4.5</li> <li>Jetpack 7.4-beta</li> <li>Jetpack 7.5</li> <li>Jetpack 7.5.0.1</li> <li>Jetpack 7.5.0.1-beta2</li> <li>Jetpack 7.5.1</li> <li>Jetpack 7.5.1-beta</li> <li>Jetpack 7.5.2</li> <li>Jetpack 7.5.3</li> <li>Jetpack 7.5.3-beta</li> <li>Jetpack 7.5.4</li> <li>Jetpack 7.5.5</li> <li>Jetpack 7.5.6</li> <li>Jetpack 7.5.7</li> <li>Jetpack 7.5-beta</li> <li>Jetpack 7.5-beta-2</li> <li>Jetpack 7.5-beta-3</li> <li>Jetpack 7.5-beta-4</li> <li>Jetpack 7.5-beta-5</li> <li>Jetpack 7.5-beta-6</li> <li>Jetpack 7.5-beta-7</li> <li>Jetpack 7.6</li> <li>Jetpack 7.6.1</li> <li>Jetpack 7.6.2</li> <li>Jetpack 7.6.3</li> <li>Jetpack 7.6.4</li> <li>Jetpack 7.6-beta</li> <li>Jetpack 7.7</li> <li>Jetpack 7.7.1</li> <li>Jetpack 7.7.2</li> <li>Jetpack 7.7.3</li> <li>Jetpack 7.7.4</li> <li>Jetpack 7.7.5</li> <li>Jetpack 7.7.6</li> <li>Jetpack 7.7-beta</li> <li>Jetpack 7.7-beta2</li> <li>Jetpack 7.8</li> <li>Jetpack 7.8.1</li> <li>Jetpack 7.8.2</li> <li>Jetpack 7.8.3</li> <li>Jetpack 7.8.4</li> <li>Jetpack 7.8-beta</li> <li>Jetpack 7.9</li> <li>Jetpack 7.9.1</li> <li>Jetpack 7.9.2</li> <li>Jetpack 7.9.3</li> <li>Jetpack 7.9.4</li> <li>Jetpack 7.9-beta</li> <li>Jetpack 7.9-beta2</li> <li>Jetpack 7.9-beta3</li> <li>Jetpack 8.0</li> <li>Jetpack 8.0.1</li> <li>Jetpack 8.0.2</li> <li>Jetpack 8.0.3</li> <li>Jetpack 8.0-beta</li> <li>Jetpack 8.1</li> <li>Jetpack 8.1.1</li> <li>Jetpack 8.1.2</li> <li>Jetpack 8.1.3</li> <li>Jetpack 8.1.4</li> <li>Jetpack 8.1-beta</li> <li>Jetpack 8.2</li> <li>Jetpack 8.2.0.1</li> <li>Jetpack 8.2.1</li> <li>Jetpack 8.2.2</li> <li>Jetpack 8.2.3</li> <li>Jetpack 8.2.4</li> <li>Jetpack 8.2.5</li> <li>Jetpack 8.2.6</li> <li>Jetpack 8.2-alpha</li> <li>Jetpack 8.2-beta2</li> <li>Jetpack 8.3</li> <li>Jetpack 8.3.1</li> <li>Jetpack 8.3.2</li> <li>Jetpack 8.3.3</li> <li>Jetpack 8.3-beta1</li> <li>Jetpack 8.3-beta2</li> <li>Jetpack 8.4</li> <li>Jetpack 8.4.1</li> <li>Jetpack 8.4.2</li> <li>Jetpack 8.4.3</li> <li>Jetpack 8.4.4</li> <li>Jetpack 8.4.5</li> <li>Jetpack 8.4-beta</li> <li>Jetpack 8.5</li> <li>Jetpack 8.5.1</li> <li>Jetpack 8.5.2</li> <li>Jetpack 8.5.3</li> <li>Jetpack 8.5-beta</li> <li>Jetpack 8.6</li> <li>Jetpack 8.6.1</li> <li>Jetpack 8.6.2</li> <li>Jetpack 8.6.3</li> <li>Jetpack 8.6.4</li> <li>Jetpack 8.6-beta</li> <li>Jetpack 8.6-beta2</li> <li>Jetpack 8.7</li> <li>Jetpack 8.7.0.1</li> <li>Jetpack 8.7.1</li> <li>Jetpack 8.7.2</li> <li>Jetpack 8.7.3</li> <li>Jetpack 8.7.4</li> <li>Jetpack 8.7-beta</li> <li>Jetpack 8.8</li> <li>Jetpack 8.8.1</li> <li>Jetpack 8.8.2</li> <li>Jetpack 8.8.3</li> <li>Jetpack 8.8.4</li> <li>Jetpack 8.8.5</li> <li>Jetpack 8.8-alpha</li> <li>Jetpack 8.8-beta</li> <li>Jetpack 8.8-beta2</li> <li>Jetpack 8.9</li> <li>Jetpack 8.9.1</li> <li>Jetpack 8.9.2</li> <li>Jetpack 8.9.3</li> <li>Jetpack 8.9.4</li> <li>Jetpack 8.9-beta</li> <li>Jetpack 8.9-beta2</li> <li>Jetpack 9.0</li> <li>Jetpack 9.0.1</li> <li>Jetpack 9.0.2</li> <li>Jetpack 9.0.2.1</li> <li>Jetpack 9.0.3</li> <li>Jetpack 9.0.4</li> <li>Jetpack 9.0.5</li> <li>Jetpack 9.0-beta</li> <li>Jetpack 9.1</li> <li>Jetpack 9.1.1</li> <li>Jetpack 9.1.2</li> <li>Jetpack 9.1.3</li> <li>Jetpack 9.2</li> <li>Jetpack 9.2.1</li> <li>Jetpack 9.2.2</li> <li>Jetpack 9.2.3</li> <li>Jetpack 9.2.4</li> <li>Jetpack 9.2-beta2</li> <li>Jetpack 9.3</li> <li>Jetpack 9.3.1</li> <li>Jetpack 9.3.2</li> <li>Jetpack 9.3.2-repo-moved</li> <li>Jetpack 9.3.3</li> <li>Jetpack 9.3.4</li> <li>Jetpack 9.3.5</li> <li>Jetpack 9.3-beta</li> <li>Jetpack 9.4</li> <li>Jetpack 9.4.1</li> <li>Jetpack 9.4.2</li> <li>Jetpack 9.4.3</li> <li>Jetpack 9.4.4</li> <li>Jetpack 9.4-beta</li> <li>Jetpack 9.5</li> <li>Jetpack 9.5.1</li> <li>Jetpack 9.5.2</li> <li>Jetpack 9.5.3</li> <li>Jetpack 9.5.4</li> <li>Jetpack 9.5.5</li> <li>Jetpack 9.5-beta</li> <li>Jetpack 9.6</li> <li>Jetpack 9.6.1</li> <li>Jetpack 9.6.2</li> <li>Jetpack 9.6.3</li> <li>Jetpack 9.6.4</li> <li>Jetpack 9.6-beta</li> <li>Jetpack 9.7</li> <li>Jetpack 9.7.1</li> <li>Jetpack 9.7.2</li> <li>Jetpack 9.7.3</li> <li>Jetpack 9.7-beta</li> <li>Jetpack 9.7-beta2</li> <li>Jetpack 9.8</li> <li>Jetpack 9.8.1</li> <li>Jetpack 9.8.2</li> <li>Jetpack 9.8.3</li> <li>Jetpack 9.8-beta</li> <li>Jetpack 9.9</li> <li>Jetpack 9.9.1</li> <li>Jetpack 9.9.2</li> <li>Jetpack 9.9.3</li> <li>Jetpack 9.9-beta</li> <li>Jetpack pr-update-to</li> </ul> Mon, 14 Feb 2022 14:03:07 GMTJetpack4774<p>The shopping assistance is not properly checked against permission access which leads to unauthorized modification of customer data.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Magento 2.4.1</li> <li>Magento 2.4.1-p1</li> <li>Magento 2.4.2</li> </ul> Tue, 15 Feb 2022 13:49:01 GMTMagento4768<p>Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 7.0</li> <li>Drupal 7.1</li> <li>Drupal 7.2</li> <li>Drupal 7.3</li> <li>Drupal 7.4</li> <li>Drupal 7.5</li> <li>Drupal 7.6</li> <li>Drupal 7.7</li> <li>Drupal 7.8</li> <li>Drupal 7.9</li> <li>Drupal 7.10</li> <li>Drupal 7.11</li> <li>Drupal 7.12</li> <li>Drupal 7.13</li> <li>Drupal 7.14</li> <li>Drupal 7.15</li> <li>Drupal 7.16</li> <li>Drupal 7.17</li> <li>Drupal 7.18</li> <li>Drupal 7.19</li> <li>Drupal 7.20</li> <li>Drupal 7.21</li> <li>Drupal 7.22</li> <li>Drupal 7.23</li> <li>Drupal 7.24</li> <li>Drupal 7.25</li> <li>Drupal 7.26</li> <li>Drupal 7.27</li> <li>Drupal 7.28</li> <li>Drupal 7.29</li> <li>Drupal 7.30</li> <li>Drupal 7.31</li> <li>Drupal 7.32</li> <li>Drupal 7.33</li> <li>Drupal 7.34</li> <li>Drupal 7.35</li> <li>Drupal 7.36</li> <li>Drupal 7.37</li> <li>Drupal 7.38</li> <li>Drupal 7.39</li> <li>Drupal 7.40</li> <li>Drupal 7.41</li> <li>Drupal 7.42</li> <li>Drupal 7.43</li> <li>Drupal 7.44</li> <li>Drupal 7.50</li> <li>Drupal 7.51</li> <li>Drupal 7.52</li> <li>Drupal 7.53</li> <li>Drupal 7.54</li> <li>Drupal 7.55</li> <li>Drupal 7.56</li> <li>Drupal 7.57</li> <li>Drupal 7.58</li> <li>Drupal 7.59</li> <li>Drupal 7.60</li> <li>Drupal 7.61</li> <li>Drupal 7.62</li> <li>Drupal 7.63</li> <li>Drupal 7.64</li> <li>Drupal 7.65</li> <li>Drupal 7.66</li> <li>Drupal 7.67</li> <li>Drupal 7.68</li> <li>Drupal 7.69</li> <li>Drupal 7.70</li> <li>Drupal 7.71</li> <li>Drupal 7.72</li> <li>Drupal 7.73</li> <li>Drupal 7.74</li> <li>Drupal 7.75</li> <li>Drupal 7.76</li> <li>Drupal 7.77</li> <li>Drupal 7.78</li> <li>Drupal 7.79</li> <li>Drupal 7.80</li> <li>Drupal 7.81</li> <li>Drupal 7.82</li> <li>Drupal 7.83</li> <li>Drupal 7.84</li> <li>Drupal 7.85</li> <li>Drupal 7.86</li> <li>Drupal 7.87</li> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 8.9.19</li> <li>Drupal 8.9.20</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.1.13</li> <li>Drupal 9.1.14</li> <li>Drupal 9.1.15</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> <li>Drupal 9.2.6</li> <li>Drupal 9.2.7</li> <li>Drupal 9.2.8</li> <li>Drupal 9.2.9</li> <li>Drupal 9.2.10</li> <li>Drupal 9.2.11</li> <li>Drupal 9.2.12</li> <li>Drupal 9.3.0</li> <li>Drupal 9.3.1</li> <li>Drupal 9.3.2</li> <li>Drupal 9.3.3</li> <li>Drupal 9.3.4</li> <li>Drupal 9.3.5</li> </ul> Fri, 18 Feb 2022 14:07:53 GMTDrupal4778<p>The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Drupal 8.0.0</li> <li>Drupal 8.0.1</li> <li>Drupal 8.0.2</li> <li>Drupal 8.0.3</li> <li>Drupal 8.0.4</li> <li>Drupal 8.0.5</li> <li>Drupal 8.0.6</li> <li>Drupal 8.1.0</li> <li>Drupal 8.1.1</li> <li>Drupal 8.1.2</li> <li>Drupal 8.1.3</li> <li>Drupal 8.1.4</li> <li>Drupal 8.1.5</li> <li>Drupal 8.1.6</li> <li>Drupal 8.1.7</li> <li>Drupal 8.1.8</li> <li>Drupal 8.1.9</li> <li>Drupal 8.1.10</li> <li>Drupal 8.2.0</li> <li>Drupal 8.2.1</li> <li>Drupal 8.2.2</li> <li>Drupal 8.2.3</li> <li>Drupal 8.2.4</li> <li>Drupal 8.2.5</li> <li>Drupal 8.2.6</li> <li>Drupal 8.2.7</li> <li>Drupal 8.2.8</li> <li>Drupal 8.3.0</li> <li>Drupal 8.3.1</li> <li>Drupal 8.3.2</li> <li>Drupal 8.3.3</li> <li>Drupal 8.3.4</li> <li>Drupal 8.3.5</li> <li>Drupal 8.3.6</li> <li>Drupal 8.3.7</li> <li>Drupal 8.3.8</li> <li>Drupal 8.3.9</li> <li>Drupal 8.4.0</li> <li>Drupal 8.4.1</li> <li>Drupal 8.4.2</li> <li>Drupal 8.4.3</li> <li>Drupal 8.4.4</li> <li>Drupal 8.4.5</li> <li>Drupal 8.4.6</li> <li>Drupal 8.4.7</li> <li>Drupal 8.4.8</li> <li>Drupal 8.5.0</li> <li>Drupal 8.5.1</li> <li>Drupal 8.5.2</li> <li>Drupal 8.5.3</li> <li>Drupal 8.5.4</li> <li>Drupal 8.5.5</li> <li>Drupal 8.5.6</li> <li>Drupal 8.5.7</li> <li>Drupal 8.5.8</li> <li>Drupal 8.5.9</li> <li>Drupal 8.5.10</li> <li>Drupal 8.5.11</li> <li>Drupal 8.5.12</li> <li>Drupal 8.5.13</li> <li>Drupal 8.5.14</li> <li>Drupal 8.5.15</li> <li>Drupal 8.6.0</li> <li>Drupal 8.6.1</li> <li>Drupal 8.6.2</li> <li>Drupal 8.6.3</li> <li>Drupal 8.6.4</li> <li>Drupal 8.6.5</li> <li>Drupal 8.6.6</li> <li>Drupal 8.6.7</li> <li>Drupal 8.6.8</li> <li>Drupal 8.6.9</li> <li>Drupal 8.6.10</li> <li>Drupal 8.6.11</li> <li>Drupal 8.6.12</li> <li>Drupal 8.6.13</li> <li>Drupal 8.6.14</li> <li>Drupal 8.6.15</li> <li>Drupal 8.6.16</li> <li>Drupal 8.6.17</li> <li>Drupal 8.6.18</li> <li>Drupal 8.7.0</li> <li>Drupal 8.7.1</li> <li>Drupal 8.7.2</li> <li>Drupal 8.7.3</li> <li>Drupal 8.7.4</li> <li>Drupal 8.7.5</li> <li>Drupal 8.7.6</li> <li>Drupal 8.7.7</li> <li>Drupal 8.7.8</li> <li>Drupal 8.7.9</li> <li>Drupal 8.7.10</li> <li>Drupal 8.7.11</li> <li>Drupal 8.7.12</li> <li>Drupal 8.7.13</li> <li>Drupal 8.7.14</li> <li>Drupal 8.8.0</li> <li>Drupal 8.8.1</li> <li>Drupal 8.8.2</li> <li>Drupal 8.8.3</li> <li>Drupal 8.8.4</li> <li>Drupal 8.8.5</li> <li>Drupal 8.8.6</li> <li>Drupal 8.8.7</li> <li>Drupal 8.8.8</li> <li>Drupal 8.8.9</li> <li>Drupal 8.8.10</li> <li>Drupal 8.8.11</li> <li>Drupal 8.8.12</li> <li>Drupal 8.9.0</li> <li>Drupal 8.9.1</li> <li>Drupal 8.9.2</li> <li>Drupal 8.9.3</li> <li>Drupal 8.9.4</li> <li>Drupal 8.9.5</li> <li>Drupal 8.9.6</li> <li>Drupal 8.9.7</li> <li>Drupal 8.9.8</li> <li>Drupal 8.9.9</li> <li>Drupal 8.9.10</li> <li>Drupal 8.9.11</li> <li>Drupal 8.9.12</li> <li>Drupal 8.9.13</li> <li>Drupal 8.9.14</li> <li>Drupal 8.9.15</li> <li>Drupal 8.9.16</li> <li>Drupal 8.9.17</li> <li>Drupal 8.9.18</li> <li>Drupal 8.9.19</li> <li>Drupal 8.9.20</li> <li>Drupal 9.0.0</li> <li>Drupal 9.0.1</li> <li>Drupal 9.0.2</li> <li>Drupal 9.0.3</li> <li>Drupal 9.0.4</li> <li>Drupal 9.0.5</li> <li>Drupal 9.0.6</li> <li>Drupal 9.0.7</li> <li>Drupal 9.0.8</li> <li>Drupal 9.0.9</li> <li>Drupal 9.0.10</li> <li>Drupal 9.0.11</li> <li>Drupal 9.0.12</li> <li>Drupal 9.0.13</li> <li>Drupal 9.0.14</li> <li>Drupal 9.1.0</li> <li>Drupal 9.1.1</li> <li>Drupal 9.1.2</li> <li>Drupal 9.1.3</li> <li>Drupal 9.1.4</li> <li>Drupal 9.1.5</li> <li>Drupal 9.1.6</li> <li>Drupal 9.1.7</li> <li>Drupal 9.1.8</li> <li>Drupal 9.1.9</li> <li>Drupal 9.1.10</li> <li>Drupal 9.1.11</li> <li>Drupal 9.1.12</li> <li>Drupal 9.1.13</li> <li>Drupal 9.1.14</li> <li>Drupal 9.1.15</li> <li>Drupal 9.2.0</li> <li>Drupal 9.2.1</li> <li>Drupal 9.2.2</li> <li>Drupal 9.2.3</li> <li>Drupal 9.2.4</li> <li>Drupal 9.2.5</li> <li>Drupal 9.2.6</li> <li>Drupal 9.2.7</li> <li>Drupal 9.2.8</li> <li>Drupal 9.2.9</li> <li>Drupal 9.2.10</li> <li>Drupal 9.2.11</li> <li>Drupal 9.2.12</li> <li>Drupal 9.3.0</li> <li>Drupal 9.3.1</li> <li>Drupal 9.3.2</li> <li>Drupal 9.3.3</li> <li>Drupal 9.3.4</li> <li>Drupal 9.3.5</li> </ul> Fri, 18 Feb 2022 14:07:53 GMTDrupal4777<p>The admin notice is not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>WooCommerce 4.6.0</li> <li>WooCommerce 4.6.0-beta.1</li> <li>WooCommerce 4.6.0-rc.1</li> <li>WooCommerce 4.6.1</li> <li>WooCommerce 4.6.2</li> <li>WooCommerce 4.6.3</li> <li>WooCommerce 4.6.3.1</li> <li>WooCommerce 4.6.4</li> <li>WooCommerce 4.6.5</li> <li>WooCommerce 4.7.0</li> <li>WooCommerce 4.7.0-beta.1</li> <li>WooCommerce 4.7.0-beta.2</li> <li>WooCommerce 4.7.0-rc.1</li> <li>WooCommerce 4.7.1</li> <li>WooCommerce 4.7.1-beta.1</li> <li>WooCommerce 4.7.2</li> <li>WooCommerce 4.7.3</li> <li>WooCommerce 4.7.4</li> <li>WooCommerce 4.8.0</li> <li>WooCommerce 4.8.0-beta.1</li> <li>WooCommerce 4.8.0-rc.1</li> <li>WooCommerce 4.8.0-rc.2</li> <li>WooCommerce 4.8.1</li> <li>WooCommerce 4.8.2</li> <li>WooCommerce 4.8.3</li> <li>WooCommerce 4.9.0</li> <li>WooCommerce 4.9.0-beta.1</li> <li>WooCommerce 4.9.0-rc.1</li> <li>WooCommerce 4.9.0-rc.2</li> <li>WooCommerce 4.9.1</li> <li>WooCommerce 4.9.2</li> <li>WooCommerce 4.9.3</li> <li>WooCommerce 4.9.4</li> <li>WooCommerce 4.9.5</li> <li>WooCommerce 5.0.0</li> <li>WooCommerce 5.0.0-beta.1</li> <li>WooCommerce 5.0.0-beta.2</li> <li>WooCommerce 5.0.0-rc.1</li> <li>WooCommerce 5.0.0-rc.2</li> <li>WooCommerce 5.0.0-rc.3</li> <li>WooCommerce 5.0.1</li> <li>WooCommerce 5.0.2</li> <li>WooCommerce 5.0.3</li> <li>WooCommerce 5.1.0</li> <li>WooCommerce 5.1.0-beta.1</li> <li>WooCommerce 5.1.0-rc.1</li> <li>WooCommerce 5.1.1</li> <li>WooCommerce 5.1.2</li> <li>WooCommerce 5.1.3</li> <li>WooCommerce 5.2.0</li> <li>WooCommerce 5.2.0-beta.1</li> <li>WooCommerce 5.2.0-rc.1</li> <li>WooCommerce 5.2.0-rc.2</li> <li>WooCommerce 5.2.1</li> <li>WooCommerce 5.2.2</li> <li>WooCommerce 5.2.3</li> <li>WooCommerce 5.2.4</li> <li>WooCommerce 5.2.5</li> <li>WooCommerce 5.3.0</li> <li>WooCommerce 5.3.0-beta.1</li> <li>WooCommerce 5.3.0-rc.1</li> <li>WooCommerce 5.3.0-rc.2</li> <li>WooCommerce 5.3.1</li> <li>WooCommerce 5.3.2</li> <li>WooCommerce 5.3.3</li> <li>WooCommerce 5.4.0</li> <li>WooCommerce 5.4.0-beta.1</li> <li>WooCommerce 5.4.0-rc.1</li> <li>WooCommerce 5.4.1</li> <li>WooCommerce 5.4.2</li> <li>WooCommerce 5.4.3</li> <li>WooCommerce 5.4.4</li> <li>WooCommerce 5.4.5</li> <li>WooCommerce 5.5.0</li> <li>WooCommerce 5.5.0-beta.1</li> <li>WooCommerce 5.5.0-rc.1</li> <li>WooCommerce 5.5.0-rc.2</li> <li>WooCommerce 5.5.1</li> <li>WooCommerce 5.5.2</li> <li>WooCommerce 5.5.3</li> <li>WooCommerce 5.5.4</li> <li>WooCommerce 5.5.5</li> <li>WooCommerce 5.6.0</li> <li>WooCommerce 5.6.0-beta.1</li> <li>WooCommerce 5.6.0-rc.1</li> <li>WooCommerce 5.6.0-rc.2</li> <li>WooCommerce 5.6.1</li> <li>WooCommerce 5.6.2</li> <li>WooCommerce 5.6.3</li> <li>WooCommerce 5.7.0</li> <li>WooCommerce 5.7.0-beta.1</li> <li>WooCommerce 5.7.0-rc.1</li> <li>WooCommerce 5.7.0-rc.2</li> <li>WooCommerce 5.7.1</li> <li>WooCommerce 5.7.2</li> <li>WooCommerce 5.7.3</li> <li>WooCommerce 5.8.0</li> <li>WooCommerce 5.8.0-beta.1</li> <li>WooCommerce 5.8.0-beta.2</li> <li>WooCommerce 5.8.0-rc.1</li> <li>WooCommerce 5.8.1</li> <li>WooCommerce 5.8.2</li> <li>WooCommerce 5.9.0</li> <li>WooCommerce 5.9.0-beta.1</li> <li>WooCommerce 5.9.0-rc.1</li> <li>WooCommerce 5.9.0-rc.2</li> <li>WooCommerce 5.9.0-RC.1</li> <li>WooCommerce 5.9.1</li> <li>WooCommerce 5.9.2</li> <li>WooCommerce 6.0.0</li> <li>WooCommerce 6.0.0-beta.1</li> <li>WooCommerce 6.0.0-rc.1</li> <li>WooCommerce 6.0.1</li> <li>WooCommerce 6.0.2</li> <li>WooCommerce 6.1.0</li> <li>WooCommerce 6.1.0-beta.1</li> <li>WooCommerce 6.1.0-rc.1</li> <li>WooCommerce 6.1.0-rc.2</li> <li>WooCommerce 6.1.1</li> <li>WooCommerce 6.1.2</li> <li>WooCommerce 6.1.3</li> </ul> Wed, 23 Feb 2022 13:19:17 GMTWooCommerce4776<p>The draft preview of the autosave is not properly escaped against an XSS attack.</p> <p>This vulnerability affects the following application versions:</p> <ul> <li>Jetpack 10.0</li> <li>Jetpack 10.0.1</li> <li>Jetpack 10.0.2</li> <li>Jetpack 10.0-beta</li> <li>Jetpack 10.1</li> <li>Jetpack 10.1.1</li> <li>Jetpack 10.1.2</li> <li>Jetpack 10.1-beta</li> <li>Jetpack 10.2</li> <li>Jetpack 10.2.1</li> <li>Jetpack 10.2.2</li> <li>Jetpack 10.2.3</li> <li>Jetpack 10.2-beta</li> <li>Jetpack 10.3</li> <li>Jetpack 10.3.1</li> <li>Jetpack 10.3.2</li> <li>Jetpack 10.3-2110.1</li> <li>Jetpack 10.3-a.1</li> <li>Jetpack 10.3-a.3</li> <li>Jetpack 10.3-beta</li> <li>Jetpack 10.4</li> <li>Jetpack 10.4.1</li> <li>Jetpack 10.4.2</li> <li>Jetpack 10.4-a.1</li> <li>Jetpack 10.4-a.3</li> <li>Jetpack 10.4-a.5</li> <li>Jetpack 10.4-a.7</li> <li>Jetpack 10.4-a.9</li> <li>Jetpack 10.4-beta</li> <li>Jetpack 10.5</li> <li>Jetpack 10.5.1</li> <li>Jetpack 10.5.2</li> <li>Jetpack 10.5.3</li> <li>Jetpack 10.5-a.1</li> <li>Jetpack 10.5-a.3</li> <li>Jetpack 10.5-beta</li> <li>Jetpack 10.6-a.1</li> <li>Jetpack 4.7</li> <li>Jetpack 4.7.1</li> <li>Jetpack 4.7.2</li> <li>Jetpack 4.7.3</li> <li>Jetpack 4.7.4</li> <li>Jetpack 4.8</li> <li>Jetpack 4.8.1</li> <li>Jetpack 4.8.2</li> <li>Jetpack 4.8.3</li> <li>Jetpack 4.8.4</li> <li>Jetpack 4.8.5</li> <li>Jetpack 4.9</li> <li>Jetpack 4.9.1</li> <li>Jetpack 4.9.2</li> <li>Jetpack 4.9.3</li> <li>Jetpack 4.9-pressable<