Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/03/15 2:14 a.m.5 views

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

8.8CVSS6.9AI score0.00514EPSS
Exploits1References1
Patchstack
Patchstack
added 2025/03/10 5:52 p.m.4 views

WordPress Gtbabel plugin < 6.6.9 - Unauthenticated Admin Account Takeover vulnerability

Unauthenticated Admin Account Takeover vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Gtbabel versions 6.6.9...

8.8CVSS9.1AI score0.00514EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/03/10 6:15 a.m.0 views

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

8.8CVSS5.8AI score0.00514EPSS
Exploits1References1
NVD
NVD
added 2025/03/10 6:15 a.m.9 views

CVE-2024-11638

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

8.8CVSS0.00514EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/10 6:0 a.m.9 views

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

0.00514EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/10 6:0 a.m.6 views

CVE-2024-11638 Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user such as admin cookies by making them open a crafted URL as the request made to analysed the URL contain...

7.2AI score0.00514EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/10 12:0 a.m.2 views

WordPress plugin Gtbabel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.8AI score0.00514EPSS
Exploits1References2
Rows per page
Query Builder