Lucene search
K

6 matches found

Microsoft Secure
Microsoft Secure
added 2026/04/01 9:0 p.m.9 views

Mitigating the Axios npm supply chain compromise

In this article 1. Analysis of the attack 2. Mitigation and protection guidance 3. Microsoft Defender detections 4. Indicators of compromise 5. Hunting queries On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP...

6.6AI score
Exploits0
OSV
OSV
added 2025/02/19 9:15 a.m.0 views

CVE-2024-13336

The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'disable-auto-updates' page. This makes it possible for unauthenticated attackers to disable all auto...

4.3CVSS5.6AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/19 8:21 a.m.6 views

CVE-2024-13336 Disable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable

The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'disable-auto-updates' page. This makes it possible for unauthenticated attackers to disable all auto...

4.3CVSS4.2AI score0.00148EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/19 8:21 a.m.9 views

CVE-2024-13336 Disable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable

The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'disable-auto-updates' page. This makes it possible for unauthenticated attackers to disable all auto...

4.3CVSS0.00148EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/19 12:0 a.m.2 views

WordPress plugin Disable Auto Updates 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.8AI score0.00148EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/18 11:35 p.m.2 views

WordPress Disable Auto Updates plugin <= 1.4 - Cross-Site Request Forgery to Auto-update Disable vulnerability

Cross-Site Request Forgery to Auto-update Disable vulnerability discovered by SOPROBRO in WordPress Plugin Disable Auto Updates versions = 1.4...

4.3CVSS7AI score0.00148EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder