6 matches found
CVE-2023-0443
creationtimestamp| type| source ---|---|--- 2023-05-30 12:18:28+00:00| seen| https://t.me/cibsecurity/64778 2025-01-10 21:03:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1222...
CVE-2023-0443
The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked...
CVE-2023-0443
The CVE-2023-0443 entry concerns the AnyWhere Elementor WordPress plugin before version 1.2.8 which disclosed a Freemius Secret Key. According to sources (NVD/Red Hat/Patchstack/Wordfence), this key could be misused to purchase the Pro subscription using test credit card numbers without payment; ...
CVE-2023-0443 AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked...
CVE-2023-0443 AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked...
WordPress AnyWhere Elementor Plugin < 1.2.8 is vulnerable to Sensitive Data Exposure
Software AnyWhere Elementor Type Plugin Vulnerable versions 1.2.8 Fixed in 1.2.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0443 Patch priority Low CVSS severity Low 5 Developer WPVibes PSID 5959639f04b8 Credits Sanjay Das Required privilege...