69 matches found
WordPress plugin Bard Extra 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Bard Extra plugin <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import vulnerability
Missing Authorization to Authenticated Subscriber+ Demo Import vulnerability discovered by Lucio Sá in WordPress Plugin Bard Extra versions = 1.2.7...
WordPress Bard Extra Plugin <= 1.2.7 is vulnerable to Broken Access Control
Software Bard Extra Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10532 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5aee743e07b2 Credits Lucio Sá Required privilege...
PT-2024-16349
Name of the Vulnerable Software and Affected Versions The Bard Extra plugin for WordPress versions prior to 1.2.8 Description The issue allows authenticated attackers with subscriber-level access and above to import demo data due to a missing capability check on the bardxtra import xml function...
CVE-2024-9830
The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...
CVE-2024-9830 Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...
CVE-2024-9830 Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...
WordPress Bard theme <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter vulnerability
Reflected Cross-Site Scripting via addqueryarg Parameter vulnerability discovered by vgo0 in WordPress Theme Bard versions = 2.216...
WordPress plugin Bard 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress Bard Theme <= 2.216 is vulnerable to Cross Site Scripting (XSS)
Software Bard Type Theme Vulnerable versions = 2.216 Fixed in 2.217 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9830 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 43a6b249026a Credits vgo0 Required privilege...
PT-2024-39872 · WordPress · The Bard Theme For Wordpress
Name of the Vulnerable Software and Affected Versions: The Bard theme for WordPress versions up to, and including, 2.216 Description: The issue arises from the use of add query arg without proper escaping on the URL, leading to Reflected Cross-Site Scripting. This allows unauthenticated attackers...
CVE-2024-9830: Improper Neutralization of Input During Web Page Generation
The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.216. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...
WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Bard versions = 2.210...
WordPress Bard Theme <= 2.210 is vulnerable to Cross Site Request Forgery (CSRF)
Software Bard Type Theme Vulnerable versions = 2.210 Fixed in 2.211 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37490 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6993dc4c2f91 Credits Dhabaleshwar Das Required...
WordPress plugin Fast Custom Social Share by CodeBard 跨站请求伪造漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the WordPress plugin Fast Custo...
Vietnamese Hackers Using New Delphi-Powered Malware to Target Indian Marketers
The Vietnamese threat actors behind the Ducktail stealer malware have been linked to a new campaign that ran between March and early October 2023, targeting marketing professionals in India with an aim to hijack Facebook business accounts. "An important feature that sets it apart is that, unlike...
How to Stop Google Bard From Storing Your Data and Location
Checking out this AI chatbot's new features? Make sure to keep these privacy tips in mind during your interactions...
Google’s Bard conversations turn up in search results
Google is coming under scrutiny after people discovered transcripts of conversations with its AI chatbot Bard are being indexed in Google search results. Bard is Googles answer to ChatGPT, and allows users to have conversations with an AI. Services like these have attracted a lot of attention,...
Google Indexed Trove of Bard AI User Chats in Search Results
By Waqas At the time of writing, over 300 pages of Bard AI user conversations were indexed on Google Search. This is a post from HackRead.com Read the original post: Google Indexed Trove of Bard AI User Chats in Search Results...