CVE-2024-32809

CVE-2024-32809: WordPress ActiveDEMAND plugin (ActiveDEMAND) ≤ 0.2.41 suffers Unrestricted Upload of File with Dangerous Type, allowing unauthenticated file uploads and potential full compromise. CVSSv3.1 base score 10.0 (NETWORK, HIGH impact). Patch status indicates this was patched; upgrade to ...

WordPress plugin ActiveDEMAND 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

ActiveDEMAND < 0.2.42 - Unauthenticated Arbitrary File Upload

Description The ActiveDEMAND plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the apisavepost function in all versions up to, and including, 0.2.41. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin ActiveDEMAND versions = 0.2.41...

WordPress ActiveDEMAND Plugin <= 0.2.41 is vulnerable to Arbitrary File Upload

Software ActiveDEMAND Type Plugin Vulnerable versions = 0.2.41 Fixed in 0.2.42 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-32809 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 7f5500fcd5a1 Credits stealthcopter Required privilege...

ActiveDEMAND plugin <= 0.2.27 - Unauthenticated Post Creation/Update/Deletion

The plugin does not have any authorisation in some of its REST route, which could allow unauthenticated users to delete, create and update arbitrary post...

CVE-2022-36296

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...

CVE-2022-36296

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...

CVE-2022-36296 WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...

CVE-2022-36296 WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability

Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin = 0.2.27 at WordPress allows unauthenticated post update/create/delete...

CVE-2022-36296

The CVE-2022-36296 entry concerns WordPress ActiveDEMAND plugin versions

PT-2022-23295 · Jumpdemand · Activedemand

Name of the Vulnerable Software and Affected Versions: JumpDEMAND Inc. ActiveDEMAND plugin versions = 0.2.27 Description: The issue concerns a Broken Authentication vulnerability. It allows unauthenticated users to update, create, or delete posts. Recommendations: For JumpDEMAND Inc. ActiveDEMAND...

WordPress plugin ActiveDEMAND 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An authorization issue vulnerabilit...

WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability

Broken Authentication vulnerability leading to unauthenticated post update/create/delete discovered by Tien Nguyen Anh Patchstack Alliance in WordPress ActiveDEMAND plugin versions = 0.2.27. Solution Update the WordPress ActiveDEMAND plugin to the latest available version at least 0.2.28...