WordPress WP Gravity Forms FreshDesk Plugin plugin <= 1.3.5 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Bonds in WordPress Plugin WP Gravity Forms FreshDesk Plugin versions = 1.3.5...

EUVD-2015-1112

Malware in sbrugna...

EUVD-2024-29950

Malicious code in bioql PyPI...

WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WP Gravity Forms FreshDesk Plugin versions = 1.3.5...

CVE-2024-32129

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2015-10102

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...

CVE-2024-12443: Improper Neutralization of Input During Web Page Generation

The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on...

Freshdesk (official) < 2.4.0 - Open Redirect

Description The plugin is vulnerable to Open Redirect due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2024-32129

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129 WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129 WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

CVE-2024-32129

CVE-2024-32129 is a URL redirection (open redirect) vulnerability in the official Freshdesk plugin for WordPress, affecting Freshdesk (official) from n/a through 2.3.6. The issue has concrete details in connected sources: an open redirect vulnerability in the Freshdesk plugin identified as CVE-20...

WordPress Plugin Freshdesk 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error...

PT-2024-24423 · Freshworks · Freshdesk

Name of the Vulnerable Software and Affected Versions: Freshdesk versions through 2.3.6 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects Freshworks Freshdesk, allowing redirection to untrusted site...

CVE-2024-32129: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Freshworks Freshdesk official.This issue affects Freshdesk official: from n/a through 2.3.6...

WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Freshdesk official versions = 2.3.6...

WordPress Freshdesk (official) Plugin <= 2.3.6 is vulnerable to Open Redirection

Software Freshdesk official Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.4.0 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2024-32129 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 4c0314383d62 Credits Le Ngoc Anh Required...

HackerOne: Support Tickets can be created on behalf of other users using spoofed email | Bypass of #2001913

A vulnerability allowed an attacker to create support tickets on behalf of other users by sending a fake email to [email protected]. This bypassed a previous fix implemented by HackerOne to prevent support tickets from being created via email...

HackerOne: Create miscellaneous support ticket on anyone's account through [email protected] email

A vulnerability was discovered where an attacker could create support tickets on anyone's account by sending a fake email to [email protected]. This allowed the attacker to create tickets on behalf of victims or even HackerOne staff. The issue was resolved internally and the created tickets...

CVE-2015-10102

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The...