WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin versions = 1.0.1. Solution No patched version available...

WordPress eCommerce Addon plugin < 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress eCommerce Addon plugin versions 1.3. Solution Update the WordPress eCommerce Addon plugin to the latest available version at least 1.3...

WordPress Purosa theme < 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Purosa theme versions 1.1.0. Solution Update the WordPress Purosa theme to the latest available version at least 1.1.0...

WordPress Tarot Card Oracle plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Tarot Card Oracle plugin versions = 1.0.5. Solution Update the WordPress Tarot Card Oracle plugin to the latest available version at least 1.0.6...

WordPress Nitek Carousel Slider Cool Transitions plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Nitek Carousel Slider Cool Transitions plugin versions = 1.1.0. Solution No patched version available...

WordPress Perelandra Sermons plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Perelandra Sermons plugin versions = 1.1.0. Solution No patched version available...

WordPress Broadcast Lite theme < 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Broadcast Lite theme versions 2.0.3. Solution Update the WordPress Broadcast Lite theme to the latest available version at least 2.0.3...

WordPress Elation theme < 1.1.01 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Elation theme versions 1.1.01. Solution Update the WordPress Elation theme to the latest available version at least 1.1.01...

WordPress Noted PRO plugin <= 1.02 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Noted PRO plugin versions = 1.02. Solution No patched version available...

WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 1.7.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin versions = 1.7.8. Solution Update the WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin to the latest available version a...

WordPress Conversion de moneda Woocommerce plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Conversion de moneda Woocommerce plugin versions = 1.0. Solution No patched version available...

WordPress Google Sheet Connector for Easy Digital Downloads plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Google Sheet Connector for Easy Digital Downloads plugin versions = 1.2. Solution Update the WordPress Google Sheet Connector for Easy Digital Downloads plugin to the latest available version at least...

WordPress GravityCaptcha plugin <= 0.5.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress GravityCaptcha plugin versions = 0.5.1. Solution Update the WordPress GravityCaptcha plugin to the latest available version at least 0.5.2...

WordPress Wp My Admin Bar plugin <= 3.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Wp My Admin Bar plugin versions = 3.1.0. Solution No patched version available...

WordPress WooCommerce upcoming Products plugin <= 1.5.9.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce upcoming Products plugin versions = 1.5.9.2. Solution No patched version available...

WordPress Recurring Bookings for WooCommerce plugin <= 2.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Recurring Bookings for WooCommerce plugin versions = 2.0.0. Solution No patched version available...

WordPress Check Zipcode plugin < 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Check Zipcode plugin versions 1.0.1. Solution Update the WordPress Check Zipcode plugin to the latest available version at least 1.0.1...

Information Disclosure

microweber is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization in the Handler.php file allow to view sensitive information in debug mode...

Insertion of Sensitive Information Into Debugging Code

Description Laravel debug mode exposes sensitive data, eg: internal source codes, stack traces, sql queries, databases names, tables names, user's cookies, email, phone number, username, laravel version, php version, etc Proof of Concept 1. Login into http://demo.microweber.org 2. Navigate to thi...

CVE-2021-3551

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threa...