WordPress plugin AppPresser 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-32776 WordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-32776

CVE-2024-32776 describes a Missing Authorization vulnerability in the WordPress plugin AppPresser (versions up to 4.3.0). Per the CVSS metrics in the document, the base score is 6.5 (Medium) with vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. This implies networked access without authentication ma...

CVE-2024-32776 WordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

PT-2024-24848 · Unknown · Apppresser

Name of the Vulnerable Software and Affected Versions: AppPresser versions through 4.3.0 Description: The issue is related to missing authorization, which poses a high risk. It is recommended to check for signs of exploitation. Recommendations: For versions through 4.3.0, patch immediately to...

AppPresser < 4.3.1 - Missing Authorization

Description The AppPresser plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggleloggingcallback function in versions up to, and including, 4.3.0. This makes it possible for unauthenticated attackers to enable and disable logging...

WordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin AppPresser versions = 4.3.0...

WordPress AppPresser Plugin <= 4.3.0 is vulnerable to Broken Access Control

Software AppPresser Type Plugin Vulnerable versions = 4.3.0 Fixed in 4.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32776 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID eba4660a9eee Credits Mika Required privilege...

AppPresser < 4.3.1 - Cross-Site Request Forgery via force_logging_off()

Description The AppPresser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the forceloggingoff function. This makes it possible for unauthenticated attackers to turn logging off via a...

CVE-2024-31374

Cross-Site Request Forgery CSRF vulnerability in Scott Bolinger AppPresser apppresser allows Cross Site Request Forgery.This issue affects AppPresser: from n/a through = 4.3.0...

CVE-2024-31374

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31374 WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Bolinger AppPresser apppresser allows Cross Site Request Forgery.This issue affects AppPresser: from n/a through = 4.3.0...

CVE-2024-31374 WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Bolinger AppPresser apppresser allows Cross Site Request Forgery.This issue affects AppPresser: from n/a through = 4.3.0...

CVE-2024-31374

CVE-2024-31374 is a CSRF flaw in AppPresser (Mobile App Framework) affecting AppPresser

WordPress Plugin AppPresser 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin AppPresser A...

PT-2024-24020 · Unknown · Apppresser

Name of the Vulnerable Software and Affected Versions: AppPresser versions through 4.3.0 Description: A Cross-Site Request Forgery CSRF issue affects AppPresser, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For versions through 4.3.0,...

CVE-2024-31268

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31268

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31268 WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31268

CVE-2024-31268 is a CSRF vulnerability in AppPresser (WordPress plugin) affecting AppPresser up to version 4.3.0. The connected data confirms a CSRF path via the toggle_logging_callback, allowing an attacker to induce a user action on behalf of a logged-in user. The CVE description itself states ...