Plugin Release Notes

WAS Plugin Feed202308091456 Aug 9, 2023, 2:56 PM Modified Detection 112439Server-Side Request Forgery 113338Web Cache Poisoning 113634Server-Side Inclusion Injection 113964PHP 8.2.x < 8.2.7 Information Disclosure 113965PHP 8.1.x < 8.1.20 Information Disclosure 113966PHP 8.0.x < 8.0.29 Information Disclosure 113986Ninja Forms Plugin for WordPress < 3.6.26 Multiple Vulnerabilities 113987PHP 8.1.x < 8.1.22 Multiple Vulnerabilities 113988PHP 8.0.x < 8.0.30 Multiple Vulnerabilities 113989MediaWiki < 1.38.2 Unlimited Lexeme Length Denial Of Service 113990MediaWiki < 1.35.5 Multiple Vulnerabilities 113991MediaWiki 1.36.x < 1.36.3 Multiple Vulnerabilities 113992MediaWiki 1.37.x < 1.37.1 Multiple Vulnerabilities 113993MediaWiki < 1.37.0 Multiple Vulnerabilities 113994MediaWiki < 1.36.0 Invalid MediaWiki Abusefilter-blocker Breaks Filters 113995MediaWiki < 1.35.2 Oauth Overlength Rsa Key 113996MediaWiki < 1.37.3 Multiple Vulnerabilities 113997MediaWiki < 1.31.12 Special Contributions Hidden User Leakage 113998MediaWiki 1.32.x < 1.35.2 Special Contributions Hidden User Leakage 113999MediaWiki < 1.35.0 Multiple Vulnerabilities 114000MediaWiki < 1.23.16 Wiki Visitor IP Leakage 114001MediaWiki 1.24.x < 1.27.2 Wiki Visitor IP Leakage 114002MediaWiki 1.28.x < 1.28.1 Wiki Visitor IP Leakage 114003MediaWiki < 1.17.2 Deleted Text Exposure 114004MediaWiki 1.18.x < 1.18.1 Deleted Text Exposure 98100Path Traversal 98116NoSQL Injection 98123Operating System Command Injection 98125Local File Inclusion 98127LDAP Injection 98779Source Code Passive Disclosure New 114005AYS Popup Box Plugin for WordPress < 3.1.3 Cross-Site Scripting
WAS Plugin Feed202308020802 Aug 2, 2023, 8:02 AM Modified Detection 112501Sitefinity < 10.0.6412.0 Multiple Vulnerabilities 112704Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution 112705Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.4.0 / 14.1.1.0.0 Authentication Bypass 112726Apache Struts 2.3.5 < 2.3.32 / 2.5.x < 2.5.10.1 Remote Code Execution (S2-045 / S2-046) 112727Apache Struts 2.0.4 < 2.3.35 / 2.5.x < 2.5.17 Remote Code Execution (S2-057) 112741Apache Struts 2.x < 2.3.15.1 Remote Code Execution (S2-016) 112762Apache Struts 2 < 2.3.33 Remote Code Execution (S2-048) 112763Apache Struts 2.1.6 < 2.3.34 / 2.5 < 2.5.13 Remote Code Execution (S2-052) 113075Apache Log4j Remote Code Execution (Log4Shell) 113115Adobe ColdFusion 11 < 11 Update 15 / 2016 < 2016 Update 7 / 2018 < 2018 Update 1 Arbitrary File Upload 113217Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) 113550Zoho ManageEngine SAML SSO Remote Code Execution 113903Adobe ColdFusion ComponentFilter Remote Code Execution 113979Atlassian Confluence < 7.13.17 Read Only User Attachment Uploads Service 113980Atlassian Confluence 7.14.x < 7.19.9 Read Only User Attachment Uploads 113981Atlassian Confluence 7.20.x < 8.2.2 Read Only User Attachment Uploads 113982Atlassian Confluence 8.x < 8.3.2 Remote Code Execution 113983Atlassian Confluence 6.1.x < 7.13.20 Remote Code Execution 113984Atlassian Confluence 7.14.0 < 7.19.8 < Remote Code Execution 113985Atlassian Confluence 8.x < 8.2.0 Remote Code Execution New 113976Simple Membership Plugin For WordPress < 4.0.9 Arbitary Member Deletion
WAS Plugin Feed202307311300 Jul 31, 2023, 1:00 PM Modified Detection 112550Full Path Disclosure 112614Server-Side Template Injection 98779Source Code Passive Disclosure New 113976Simple Membership Plugin For WordPress < 4.0.9 Arbitary Member Deletion
WAS Plugin Feed202307240920 Jul 24, 2023, 9:20 AM Modified Detection 112501Sitefinity < 10.0.6412.0 Multiple Vulnerabilities 112704Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution 112705Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.4.0 / 14.1.1.0.0 Authentication Bypass 112726Apache Struts 2.3.5 < 2.3.32 / 2.5.x < 2.5.10.1 Remote Code Execution (S2-045 / S2-046) 112727Apache Struts 2.0.4 < 2.3.35 / 2.5.x < 2.5.17 Remote Code Execution (S2-057) 112741Apache Struts 2.x < 2.3.15.1 Remote Code Execution (S2-016) 112762Apache Struts 2 < 2.3.33 Remote Code Execution (S2-048) 112763Apache Struts 2.1.6 < 2.3.34 / 2.5 < 2.5.13 Remote Code Execution (S2-052) 113075Apache Log4j Remote Code Execution (Log4Shell) 113115Adobe ColdFusion 11 < 11 Update 15 / 2016 < 2016 Update 7 / 2018 < 2018 Update 1 Arbitrary File Upload 113217Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell) 113335DotNetNuke 5.x < 9.1.1 Remote Code Execution 113550Zoho ManageEngine SAML SSO Remote Code Execution 113903Adobe ColdFusion ComponentFilter Remote Code Execution 113971Citrix Gateway / ADC Cross-Site Scripting 113973Web Services Description Language (WSDL) File Detected 98008Web Application Firewall Detected 98060Missing 'X-Frame-Options' Header 98072Common Directories Detection 98611Error Message 98612Missing 'Expect-CT' Header (deprecated) 98779Source Code Passive Disclosure 98828PHP 5.6.x < 5.6.5 Multiple Vulnerabilities New 113972OpenID Connect Anonymous Account 113974Web Application Description Language (WADL) File Detected 113975PHP Debug Bar Enabled 113977Odoo < 16.2022.12.24 Cross-Site Scripting
WAS Plugin Feed202307130817 Jul 13, 2023, 8:17 AM Modified Detection 112540SSL/TLS Certificate RSA Keys Less Than 2048 bits 113075Apache Log4j Remote Code Execution (Log4Shell) 113335DotNetNuke 5.x < 9.1.1 Remote Code Execution 113422DotNetNuke Administration Panel Login Form Detected 113449WordPress Cron Enabled 113716Atlassian Jira < 3.13.2 WebWork 1 Parameter Injection Hole 113904Sitecore Unauthenticated User Enumeration 113905Sitecore Unauthenticated Arbitrary File Read 113960Apache Tomcat 11.0.0-M5 Information Disclosure 113961Apache Tomcat 10.1.8 Information Disclosure 113962Apache Tomcat 9.0.74 Information Disclosure 113963Apache Tomcat 8.5.88 Information Disclosure 113971Citrix Gateway / ADC Cross-Site Scripting 98054Unvalidated Redirection 98126Remote File Inclusion 98649Invalid Subresource Integrity 98681Sitemap.xml File Detected
WAS Plugin Feed202307060627 Jul 6, 2023, 6:27 AM Modified Detection 112719Client-Side Prototype Pollution 113069SQL Injection Authentication Bypass 113162MySQLjs SQL Injection Authentication Bypass 113309XPath Injection Authentication Bypass 113317Expression Language Injection 113331LDAP Injection Authentication Bypass 113337NoSQL Injection Authentication Bypass 113903Adobe ColdFusion ComponentFilter Remote Code Execution 98042Login Form Bruteforced 98109DOM-based Cross-Site Scripting (XSS) 98139Cookie Authentication Succeeded 98681Sitemap.xml File Detected New 113969Social Login and Register for WordPress < 7.6.5 Authentication Bypass 113970Nuxt.js 3.4.x < 3.4.3 Remote Code Execution