CVE-2024-32442

Technical details about CVE-2024-32442 are not publicly provided in the supplied documents; no affected product versions, impact, or fixes are specified here. Monitor for updates.

CVE-2024-32442 WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.7...

CVE-2024-32442 WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.7...

WordPress Plugin Zoho Campaigns 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zo...

WordPress Plugin Zoho Campaigns 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zo...

PT-2024-24572 · Zoho · Zoho Campaigns

Name of the Vulnerable Software and Affected Versions: Zoho Campaigns versions n/a through 2.0.7 Description: A Cross-Site Request Forgery CSRF issue has been identified. This issue allows an attacker to trick a user into performing unintended actions on a web application that the user is...

PT-2024-24573 · Zoho · Zoho Campaigns

Name of the Vulnerable Software and Affected Versions: Zoho Campaigns versions n/a through 2.0.7 Description: A Cross-Site Request Forgery CSRF issue has been identified. This issue allows an attacker to trick a user into performing unintended actions on a web application. Recommendations: For...

WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Zoho Campaigns versions = 2.0.7...

WordPress Zoho Campaigns plugin <= 2.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Zoho Campaigns versions = 2.0.7...

WordPress Zoho Campaigns Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Zoho Campaigns Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32441 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0193281fc692 Credits Majed Refaea Required...

WordPress Zoho Campaigns Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Zoho Campaigns Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32442 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afe9720b1fb1 Credits Majed Refaea Required...

PT-2024-21812 · Mautic +1 · Mautic

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue allows users with low privileges to view certain pages that expose sensitive information, including company names, users' names...

Watch Out for 'Latrodectus' - This Malware Could Be In Your Inbox

Threat hunters have discovered a new malware called Latrodectus that has been distributed as part of email phishing campaigns since at least late November 2023. "Latrodectus is an up-and-coming downloader with various sandbox evasion functionality," researchers from Proofpoint and Team Cymru said...

ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack PoC Make an admin open a URL like where is a valid ID: http://example.com/wp-admin/admin.php?page=enl-campaigns=campaign-delete=...

CVE-2024-30239

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...

CVE-2024-30239 WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...

CVE-2024-30239

CVE-2024-30239: Zoho Campaigns WordPress plugin is affected up to v2.0.6 with an SQL injection vulnerability due to improper/insufficient escaping. Connected sources indicate this entry has been patched in later versions; remediation is to upgrade to a newer release (beyond 2.0.6). Exploitation s...

CVE-2024-30239 WordPress Zoho Campaigns plugin <= 2.0.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Campaigns.This issue affects Zoho Campaigns: from n/a through 2.0.6...

WordPress Plugin Zoho Campaigns SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Zoho Campaigns suffers fro...

liveSite Version 2019.1 - Remote Code Execution

Exploit Title: liveSite Version : 2019.1 Campaigns Remote Code Execution Date: 2024-1-9 Exploit Author: tmrswrr Category: Webapps Vendor Homepage: https://livesite.com/ Version : 2019.1 Tested on: https://www.softaculous.com/apps/cms/liveSite 1 Login with admin cred Click Campaigns Create Campaig...