EUVD-2024-54135

Malicious code in bioql PyPI...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

WordPress Gtbabel plugin < 6.6.9 - Unauthenticated Admin Account Takeover vulnerability

Unauthenticated Admin Account Takeover vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Gtbabel versions 6.6.9...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

CVE-2024-11638

The Gtbabel WordPress plugin is vulnerable in versions prior to 6.6.9 due to a failure to verify that the URL submitted for code analysis belongs to the specific blog. This flaw allows unauthenticated attackers to perform an unauthenticated admin account takeover by tricking a logged-in user (suc...

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

WordPress plugin Gtbabel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-11638: Undefined Security Weakness

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...