WordPress Slimstat Analytics Plugin <= 4.9.3.3 is vulnerable to SQL Injection

Software Slimstat Analytics Type Plugin Vulnerable versions = 4.9.3.3 Fixed in 4.9.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID b97867ef3e8b Credits Unknown Required privilege Subscriber Published 31...

WordPress HappyFiles Pro Plugin <= 1.8.1 is vulnerable to Arbitrary File Deletion

Software HappyFiles Pro Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-25446 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 9c01f634cec4 Credits Dave Jong Patchstack...

WordPress Amazon S3 Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software Amazon S3 Type Plugin Vulnerable versions = 1.5 Fixed in 1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6c427f7e9cc6 Credits Unknown Required privilege Unauthenticated...

WordPress UpdraftPlus Plugin 2.22.14-2.23.2 is vulnerable to Broken Access Control

Software UpdraftPlus Type Plugin Vulnerable versions 2.22.14-2.23.2 Fixed in 2.23.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 5c443082ec78 Credits N/A Required privilege Subscriber...

WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection

Software Be POPIA Compliant Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47445 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 90e83cd07291 Credits Team WeBoB Required privilege Unauthenticate...

WordPress Real Estate 7 Theme <= 3.3.4 is vulnerable to Broken Access Control

Software Real Estate 7 Type Theme Vulnerable versions = 3.3.4 Fixed in 3.3.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 5.8 Developer Claim ownership PSID a71c4c5edd92 Credits RE-ALTER Required privilege Unauthenticat...

WordPress Paytium Plugin <= 4.3.7 is vulnerable to Broken Access Control

Software Paytium Type Plugin Vulnerable versions = 4.3.7 Fixed in 4.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 6.3 Developer Claim ownership PSID 13b7e0f1ab0b Credits Unknown Required privilege Subscriber Published ...

WordPress Slimstat Analytics Plugin <= 4.9.3.2 is vulnerable to SQL Injection

Software Slimstat Analytics Type Plugin Vulnerable versions = 4.9.3.2 Fixed in 4.9.3.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0630 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 4253ca9a6d2d Credits Marc Montpas Required privilege Subscribe...

WordPress Pie Register Plugin < 3.8.1.3 is vulnerable to Arbitrary Content Deletion

Software Pie Register Type Plugin Vulnerable versions 3.8.1.3 Fixed in 3.8.1.3 OWASP Top 10 A1: Injection Classification Arbitrary Content Deletion CVE CVE-2022-4024 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 837f46e8cf1c Credits cydave Required privilege...

WordPress OceanWP Theme <= 3.4.1 is vulnerable to Local File Inclusion

Software OceanWP Type Theme Vulnerable versions = 3.4.1 Fixed in 3.4.2 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-23700 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID 78647cd015a5 Credits Rafie Muhammad Patchstack Required privilege...

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection

Software Zendrop – Global Dropshipping Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.0.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-25960 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 95ad356dc57b Credits Dave Jong Patchstack Required...

WordPress VK All in One Expansion Unit Plugin <= 9.87.0.1 is vulnerable to Cross Site Scripting (XSS)

Software VK All in One Expansion Unit Type Plugin Vulnerable versions = 9.87.0.1 Fixed in 9.87.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID c3722e6e8342 Credits WordFence...

WordPress BuddyForms Plugin <= 2.7.7 is vulnerable to PHP Object Injection

Software BuddyForms Type Plugin Vulnerable versions = 2.7.7 Fixed in 2.7.8 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE N/A Patch priority High CVSS severity High 5.4 Developer Claim ownership PSID 2e9e362a10ab Credits WordFence Required privilege Subscriber Published 21...

Beyond the basics: Implementing an active defense

Active defense a key approach to protecting against major threats Having an active defense posture, where the defenders actively use threat intelligence and their own environment telemetry to uncover potential compromises, is the next stage in the cyber security maturity road. Instead of waiting...

WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection

Software Plugin for Google Reviews Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-44580 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID 5131a96c12f6 Credits Rafie Muhammad Patchstack Required...

WordPress Beautiful Cookie Consent Banner Plugin <= 2.10.0 is vulnerable to Cross Site Scripting (XSS)

Software Beautiful Cookie Consent Banner Type Plugin Vulnerable versions = 2.10.0 Fixed in 2.10.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 90e192c918ce Credits Wordfence...

WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection

Software WP Statistics Type Plugin Vulnerable versions = 13.2.10 Fixed in 13.2.11 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-38074 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 7a7be43a0e11 Credits Rafie Muhammad Patchstack Required privilege...

WordPress Gerencianet Oficial Plugin <= 1.4.8 is vulnerable to Broken Access Control

Software Gerencianet Oficial Type Plugin Vulnerable versions = 1.4.8 Fixed in 2.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID df423227780d Credits Unknown Required privilege...

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to SQL Injection

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47151 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 3458eadeff2d Credits RE-ALTER Require...

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A2: Broken Authentication Classification Arbitrary File Upload CVE CVE-2022-46839 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 21f585ae6afa Credi...