592 matches found
PT-2024-38381 · WordPress · Husky – Products Filter Professional
Name of the Vulnerable Software and Affected Versions: HUSKY – Products Filter Professional for WooCommerce plugin for WordPress versions up to, and including, 1.3.6.1 Description: The issue is related to Insecure Direct Object Reference. It affects the plugin via the woof messenger remove subscr...
WordPress HUSKY Plugin <= 1.3.6.1 is vulnerable to Insecure Direct Object References (IDOR)
Software HUSKY Type Plugin Vulnerable versions = 1.3.6.1 Fixed in 1.3.6.2 OWASP Top 10 A4: Insecure Design Classification Insecure Direct Object References IDOR CVE CVE-2024-7491 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f141f252795c Credits shaman0x01 Required...
CVE-2024-43121
Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...
CVE-2024-43121
Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...
CVE-2024-43121 WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...
CVE-2024-43121 WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...
CVE-2024-43121
CVE-2024-43121 involves the HUSKY – Products Filter Professional for WooCommerce extension. Multiple sources (Red Hat, Wordfence) confirm an Improper Privilege Management vulnerability allowing Privilege Escalation. Affected product: HUSKY versions from unknown up to 1.3.6.1. Public disclosure in...
PT-2024-30309 · Husky · Husky
Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.6.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the HUSKY software. Recommendations: For versions 1.3.6.1 and earlier, at the moment, there is no...
WordPress plugin HUSKY 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin HUSKY versions = 1.3.6.1...
WordPress HUSKY Plugin <= 1.3.6.1 is vulnerable to Privilege Escalation
Software HUSKY Type Plugin Vulnerable versions = 1.3.6.1 Fixed in 1.3.6.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-43121 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID d01fc5fea986 Credits Rafie Muhamma...
The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce (formerly WOOF) of the WordPress content management system – relates to the failure to protect the SQL query structure. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce previously WOOF of the WordPress content management system – is related to the lack of protection for the SQL query structure when processing the woofauthor parameter. Exploiting this vulnerability allows an...
CVE-2024-6457
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woofauthor’ parameter in all versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woofauthor’ parameter in all versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2024-6457
CVE-2024-6457 affects HUSKY – Products Filter Professional for WooCommerce (WordPress). It is an unauthenticated time-based SQL Injection via the woof_author parameter in all versions up to 1.3.6 due to insufficient escaping and query preparation, enabling attackers to append SQL to existing quer...
CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woofauthor’ parameter in all versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
WordPress HUSKY plugin <= 1.3.6 - Unauthenticated Time-Based SQL Injection vulnerability
Unauthenticated Time-Based SQL Injection vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin HUSKY versions = 1.3.6...
WordPress HUSKY Plugin <= 1.3.6 is vulnerable to SQL Injection
Software HUSKY Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.6.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6457 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 98840dcb4c01 Credits Arkadiusz Hydzik Required privilege Unauthenticated...
PT-2024-5249
Name of the Vulnerable Software and Affected Versions: HUSKY – Products Filter Professional for WooCommerce plugin for WordPress versions up to, and including, 1.3.6 Description: The issue is related to a time-based SQL Injection vulnerability via the woof author parameter. This vulnerability is...
