220 matches found
CVE-2024-8795 BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover
The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the myaccountupdate function. This makes it possible for unauthenticated attackers to update a user's accou...
WordPress BA Book Everything plugin <= 1.6.20 - Unauthenticated Arbitrary User Password Reset vulnerability
Unauthenticated Arbitrary User Password Reset vulnerability discovered by wesley wcraft in WordPress Plugin BA Book Everything versions = 1.6.20...
WordPress BA Book Everything plugin <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover vulnerability
Cross-Site Request Forgery to Email Address Update/Account Takeover vulnerability discovered by wesley wcraft in WordPress Plugin BA Book Everything versions = 1.6.20...
CVE-2024-8795: Cross-Site Request Forgery (CSRF)
The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the myaccountupdate function. This makes it possible for unauthenticated attackers to update a user's accou...
WordPress BA Book Everything Plugin <= 1.6.20 is vulnerable to Cross Site Request Forgery (CSRF)
Software BA Book Everything Type Plugin Vulnerable versions = 1.6.20 Fixed in 1.6.21 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8795 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID ac1ae1bb0f23 Credits wesley wcraft...
CVE-2024-8794: Unverified Password Change
The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the resetuserpassword function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to...
WordPress plugin BA Book Everything 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2024-39258 · WordPress · Ba Book Everything
Name of the Vulnerable Software and Affected Versions: BA Book Everything plugin for WordPress versions up to, and including, 1.6.20 Description: The issue allows unauthenticated attackers to reset any user's passwords, including administrators, due to the reset user password function not verifyi...
WordPress plugin BA Book Everything 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-39259 · WordPress · Ba Book Everything
Name of the Vulnerable Software and Affected Versions: BA Book Everything plugin for WordPress versions up to, and including, 1.6.20 Description: The issue is due to missing or incorrect nonce validation on the my account update function, making it possible for unauthenticated attackers to update...
Malicious code in watch-everything-everywhere-all-at-once-2022-online-on-free-streamings (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hd-everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre4k (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in everything-everywhere-all-at-once-2022-online-free-fullmovies-on-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-32576
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...
CVE-2024-32576 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...
CVE-2024-32598
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...
CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...
CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...