WordPress plugin InstaWP Connect security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Cross site scripting

The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API requests due to the usage of comparison operators to verify API keys against the ones stored in the site options...

PT-2021-17335

Name of the Vulnerable Software and Affected Versions: Shinobi through ocean version 1 Description: An issue was discovered in the lib/auth.js file, where Incorrect Access Control allows attackers to bypass API key validation. By utilizing JavaScript Proto Method names, such as constructor or...