MSC-2024-1516

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-twisted) (RHSA-2024:1516)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1516 advisory. Twisted is a networking engine written in Python, supporting numerous protocols. It contains a web server, numerous chat clients, chat servers, mail...

CVE-2024-1516

creationtimestamp| type| source ---|---|--- 2024-03-14 20:01:36+00:00| seen| https://t.me/ctinow/208083 2025-02-14 10:04:00+00:00| seen| Telegram/trnhnR4petjm4WCeB3ZhVUuENPh2M0rBdUV3lP8tPvwP61z...

CVE-2024-1516

The WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on the checkforsaaspush function in all versions up to, and including, 3.15.1. This makes it possible for unauthenticated attackers to create arbitrary posts with arbitrar...

CVE-2024-1516

CVE-2024-1516 : WP eCommerce for WordPress suffers unauthorized arbitrary post creation due to a missing capability check in check_for_saas_push() in all versions up to 3.15.1. The vulnerability is exploitable by unauthenticated actors to create posts with arbitrary content. Technical details spe...

WordPress WP eCommerce Plugin <= 3.15.1 is vulnerable to Broken Access Control

Software WP eCommerce Type Plugin Vulnerable versions = 3.15.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1516 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7c529550d022 Credits Krzysztof Zając Required privilege...