CVE-2024-47359

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:06+00:00| seen| https://t.me/cvedetector/9588 2026-04-01 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihfwgvtck2u...

WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Naver Blog versions = 1.0...

WordPress Naver Blog Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Naver Blog Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51639 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 5f89994a572e Credits SOPROBRO Required privilege...

In the Dark about Shadow APIs?

I’m often asked about shadow APIs and shadow API parameters—even by people with a lot of experience in the API development space...

CVE-2024-49685

creationtimestamp| type| source ---|---|--- 2024-10-31 11:55:49+00:00| seen| https://t.me/cvedetector/9499 2026-04-02 17:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijposm3gs2v...

Exploit for OS Command Injection in Cyberpanel

CyberPanel Command Injection Vulnerability - CVE-2024-51378...

CVE-2024-9988

creationtimestamp| type| source ---|---|--- 2024-10-29 18:57:39+00:00| seen| https://t.me/cvedetector/9345 2026-04-08 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miyz6vkwhl2q...

CVE-2024-50491

creationtimestamp| type| source ---|---|--- 2024-10-28 15:19:40+00:00| seen| https://t.me/cvedetector/9123 2026-04-02 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihvlcbnu327...

CVE-2024-50450

creationtimestamp| type| source ---|---|--- 2024-10-28 13:39:08+00:00| seen| https://t.me/cvedetector/9104 2026-04-02 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mii225vpel2a...

CVE-2024-50442

creationtimestamp| type| source ---|---|--- 2024-10-28 13:39:04+00:00| seen| https://t.me/cvedetector/9103 2026-04-04 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miokztfltn23...

CVE-2024-50489

creationtimestamp| type| source ---|---|--- 2024-10-28 13:38:57+00:00| seen| https://t.me/cvedetector/9098 2026-04-02 01:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihywl4l6z2v...

CVE-2024-50487

creationtimestamp| type| source ---|---|--- 2024-10-28 13:38:57+00:00| seen| https://t.me/cvedetector/9097 2026-04-02 00:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihxsndbew2c...

CVE-2024-9932

The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

CVE-2024-9931

The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0. This is due to missing validation on the token being supplied during the autologin through the plugin. This makes it possible for unauthenticated attackers to log in to the fir...

CVE-2024-9932

The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

CVE-2024-9932 Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

CVE-2024-9932

CVE-2024-9932 affects the WordPress plugin “Wux Blog Editor” up to version 3.0.0. The root cause is inadequate file type validation in the wuxbt_insertImageNew function, enabling unauthenticated users to upload arbitrary files to the server and potentially achieve remote code execution. Publicly ...

CVE-2024-9932 Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

CVE-2024-9931 Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator

The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0. This is due to missing validation on the token being supplied during the autologin through the plugin. This makes it possible for unauthenticated attackers to log in to the fir...

CVE-2024-9931

CVE-2024-9931: Wux Blog Editor for WordPress contains an authentication bypass in versions