EUVD-2024-54135

Malicious code in bioql PyPI...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

WordPress Gtbabel plugin < 6.6.9 - Unauthenticated Admin Account Takeover vulnerability

Unauthenticated Admin Account Takeover vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Gtbabel versions 6.6.9...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638

The Gtbabel WordPress plugin versions prior to 6.6.9 is vulnerable to an unauthenticated account takeover. The flaw exists because the plugin fails to verify that the URL provided for code analysis belongs to the blog. An unauthenticated attacker can craft a malicious URL that, when opened by a l...

WordPress plugin Gtbabel has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-10562

Name of the Vulnerable Software and Affected Versions Gtbabel WordPress plugin versions prior to 6.6.9 Description The issue allows unauthenticated attackers to retrieve a logged-in user's cookies, such as an admin's, by making them open a crafted URL. This is possible because the plugin does not...

CVE-2024-11638: Undefined Security Weakness

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...