4435 matches found
CVE-2024-32100
CVE-2024-32100 is an information-exposure vulnerability in the Easy Digital Downloads (EDD) WordPress plugin up to version 3.2.11. The issue allows an unauthenticated actor to access sensitive information exposed by EDD. Public sources in the connected documents confirm the vulnerability descript...
CVE-2024-34812
CVE-2024-34812 concerns Exposure of Sensitive Information to an Unauthorized Actor in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons. Affected product: ShopBuilder – Elementor WooCommerce Builder Addons (RadiusTheme) with versions from n/a through 2.1.8. Documented impact: informa...
CVE-2024-35165
CVE-2024-35165 is a vulnerability in Gutenify that leads to Exposure of Sensitive Information to an Unauthorized Actor. According to the provided data, Gutenify versions up to 1.4.0 are affected, with the issue enabling information exposure via an API or similar surface. The description indicates...
CVE-2024-35165 WordPress Gutenify plugin <= 1.4.0 - Sensitive Data Exposure via API vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gutenify.This issue affects Gutenify: from n/a through 1.4.0...
CVE-2024-35171 WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...
CVE-2024-34549
CVE-2024-34549: Exposure of Sensitive Information to an Unauthorized Actor in Automattic WP Job Manager (affecting WP Job Manager up to version 2.2.2). The connected Red Hat and Wordfence entries confirm the issue is an Information Exposure vulnerability, exploitable by unauthenticated actors, wi...
CVE-2024-34549 WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2...
CVE-2024-34556
CVE-2024-34556 affects UkrSolution Barcode Scanner with Inventory & Order Manager. The connected Wordfence entry documents an unauthenticated information exposure vulnerability affecting the Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.4. The CVE entry links to a vulnerabi...
APT trends report Q1 2024
For more than six years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research. They provide a representative snapshot of what we have published and...
PT-2024-25963 · Automattic · Wp Job Manager
Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.2.3 is not mentioned, however, the issue affects WP Job Manager from n/a through 2.2.2, so WP Job Manager versions through 2.2.2 Description: The issue is related to Exposure of Sensitive Information to an...
CVE-2024-34368
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...
CVE-2024-34382
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Robo Gallery: from n/a through 3.2.18...
CVE-2024-34388
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from n/a through 1.2.5...
CVE-2024-34368
CVE-2024-34368: Exposure of Sensitive Information to an Unauthorized Actor in Mooberry Book Manager. Affected: Mooberry Book Manager
CVE-2024-34368 WordPress Mooberry Book Manager plugin <= 4.15.12 - Sensitive Data Exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...
CVE-2024-34382
CVE-2024-34382 : Robo Gallery (RoboSoft Robo Gallery) is affected by an unauthenticated information exposure up to version 3.2.18. The vulnerability is confirmed in connected documents and has been patched; upgrade to a version newer than 3.2.18 to mitigate.
CVE-2024-34388
Technical details about CVE-2024-34388 are not provided in the connected documents; information remains limited to exposure of sensitive data in Scribit GDPR Compliance plugin. Monitor for official advisories and updates.
Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution
More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that's vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue, tracked as CVE-2023-49606, carries a CVSS score of 9.8 out of a maximum of 10, per Cisco Talos, which...
China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices
The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys. Dubbed ArcaneDoor, the activity is said to have commenced...
