pnn219

Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes

Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads

Thelia Page Module before 2.0.4 CSRF via Page Tag, Document and Image Delete Routes

Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions

Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name

WPGraphQL before 2.24.1 Missing Authorization via createComment Mutation

WPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations

WPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations

WPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS

Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url