1123 matches found
CVE-2023-23678 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Plugin <= 2.2.5 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent for GDPR, CCPA & ePrivacy .This issue affects WP Cookie Consent for GDPR, CCPA & ePrivacy : from n/a through 2.2.5...
CVE-2023-5823
Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...
CVE-2023-5823
Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...
CVE-2023-5823
CVE-2023-5823 is a CSRF vulnerability in the TK Google Fonts GDPR Compliant WordPress plugin, affecting versions up to and including 2.2.11. The issue allows unauthenticated attackers to exploit Cross-Site Request Forgery; CVSSv3.1 base score is 8.8 (HIGH) per NVD/audit sources, with client impac...
CVE-2023-5823 WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin = 2.2.11 versions...
WordPress Plugin TK Google Fonts GDPR Compliant Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin TK Google Fonts GDPR...
WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)
Software TK Google Fonts GDPR Compliant Type Plugin Vulnerable versions = 2.2.11 Fixed in 2.2.12 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5823 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 766d6e0e24c8 Credits Mik...
CVE-2023-41800
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...
CVE-2023-41800
CVE-2023-41800: A stored XSS vulnerability in the UniConsent CMP WordPress plugin (UniConsent CMP for GDPR CPRA GPP TCF) affecting versions
CVE-2023-41800 WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...
Essential Guide to Cybersecurity Compliance
SOC 2, ISO, HIPAA, Cyber Essentials – all the security frameworks and certifications today are an acronym soup that can make even a compliance expert's head spin. If you're embarking on your compliance journey, read on to discover the differences between standards, which is best for your business...
TikTok Faces Massive €345 Million Fine Over Child Data Violations in E.U.
The Irish Data Protection Commission DPC slapped TikTok with a €345 million about $368 million fine for violating the European Union's General Data Protection Regulation GDPR in relation to its handling of children's data. The investigation, initiated in September 2021, examined how the popular...
You Need to Update Google Chrome or Whatever Browser You Use
Plus: Spyware-packing ads, TikTok GDPR violations, Elon Musk investigations, and more...
The Dark Side of Web Development: Why You Should Be Prioritizing Shadow Code
In the fast-paced world of web development, staying ahead of the curve is paramount, as developers are frequently under pressure to deliver products and functionalities quickly and efficiently. To meet accelerated timelines, they often leverage third-party scripts and open-source libraries,...
Information disclosure through insecure design
Introduction Insecure design can lead to many issues. The Software Development Life Cycle SDLC should contain steps to evaluate and consider security throughout the process. Several recent web application and API tests have revealed a common issue of responses containing too much data, and leakin...
WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software UniConsent Cookie Consent CMP for GDPR / CCPA Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41800 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2b359ed28a55...
WordPress GDPR Cookie Compliance Plugin < 4.12.5 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mooveagency:gdprcookiecompliance"; ifdescription...
Elevate Your Security Posture: Implementing CIS Top 18 Controls Through Qualys Cloud Platform
The Center for Internet Security CIS is a 501c3 nonprofit organization originally formed in October 2000. CIS has created what is considered one of the industry’s “gold standard” security frameworks based on its mission to “help people, businesses, and governments protect themselves against...