13 matches found
EUVD-2024-31343
Malicious code in bioql PyPI...
CVE-2024-33627
Server-Side Request Forgery SSRF vulnerability in Cusmin Absolutely Glamorous Custom Admin.This issue affects Absolutely Glamorous Custom Admin: from n/a through 7.2.2...
CVE-2024-33627
Server-Side Request Forgery SSRF vulnerability in Cusmin Absolutely Glamorous Custom Admin.This issue affects Absolutely Glamorous Custom Admin: from n/a through 7.2.2...
CVE-2024-33627 WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Cusmin Absolutely Glamorous Custom Admin.This issue affects Absolutely Glamorous Custom Admin: from n/a through 7.2.2...
CVE-2024-33627
CVE-2024-33627 involves the AGCA – Absolutely Glamorous Custom Admin WordPress plugin. Connected Red Hat and Wordfence records describe an Authenticated (Admin+) Server-Side Request Forgery (SSRF) vulnerability affecting AGCA up to version 7.2.2/7.2.3, allowing an admin-level attacker to trigger ...
PT-2024-25386 · Unknown · Cusmin Absolutely Glamorous Custom Admin
Name of the Vulnerable Software and Affected Versions: Cusmin Absolutely Glamorous Custom Admin versions through 7.2.2 Description: A Server-Side Request Forgery SSRF issue affects the software, allowing unauthorized access to internal resources. This can lead to sensitive data exposure or other...
WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Absolutely Glamorous Custom Admin versions = 7.2.3...
WordPress Absolutely Glamorous Custom Admin Plugin < 7.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Absolutely Glamorous Custom Admin Type Plugin Vulnerable versions 7.2.2 Fixed in 7.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2907 Patch priority Low CVSS severity Low 5.9 Developer Cusmin PSID c9b7d9956a4d Credits Dikshita Trivedi...
WordPress Absolutely Glamorous Custom Admin Plugin <= 7.2.3 is vulnerable to Server Side Request Forgery (SSRF)
Software Absolutely Glamorous Custom Admin Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2024-33627 Patch priority Low CVSS severity Low 4.4 Developer Cusmin PSID aca8f3a66d97 Credits emad Required...
CVE-2021-36823
CVE-2021-36823 affects the WordPress plugin AGCA – Absolutely Glamorous Custom Admin (version
WordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jörgson Patchstack Red Team in WordPress Absolutely Glamorous Custom Admin plugin versions = 6.8. Solution Update the WordPress Absolutely Glamorous Custom Admin plugin to the latest available version at least 6.9, addition...
WordPress Absolutely Glamorous Custom Admin plugin <= 6.5.4 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability found by Antony Garand Sucuri in WordPress Absolutely Glamorous Custom Admin plugin versions = 6.5.4. Solution Update the WordPress Absolutely Glamorous Custom Admin plugin to the latest available version at least 6.5.5...
WordPress Absolutely Glamorous Custom Admin Plugin <= 6.4.1 Database Backup Arbitrary File Download Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112439";...