1247 matches found
CVE-2023-0583
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'updatevkblocksoptions' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons...
CVE-2023-0583
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'updatevkblocksoptions' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons...
CVE-2023-0583 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'updatevkblocksoptions' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons...
CVE-2023-0583 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
The VK Blocks plugin for WordPress is vulnerable to improper authorization via the REST 'updatevkblocksoptions' function in versions up to, and including, 1.57.0.5. This allows authenticated attackers, with contributor-level permissions or above, to change plugin settings including default icons...
VK Blocks < 1.57.1.0 - Contributor+ Settings Update via REST API
The plugin uses improper authorization for the REST API vk-blocks/v1/updatevkblocksoptions, allowing users with a role as low as contributor to change plugin settings including default icons...
WordPress Social Media & Share Icons Plugin <= 2.8.1 is vulnerable to Broken Access Control
Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.8.1 Fixed in 2.8.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-34009 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7a4dfcea8ca4 Credits István Márton...
PT-2023-3367 · Huawei · Huawei Desktop
Name of the Vulnerable Software and Affected Versions: Huawei desktop affected versions not specified Description: The issue is related to spoofing trustlists, which can be exploited to hide app icons on the desktop, preventing them from being uninstalled. This is achieved by bypassing...
PT-2023-3368 · Huawei · Huawei Desktop
Name of the Vulnerable Software and Affected Versions: Huawei desktop affected versions not specified Description: The issue is related to spoofing trustlists, which can be exploited to hide app icons on the desktop, preventing them from being uninstalled. This can be achieved by bypassing...
Malicious code in dc-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2015-10104
A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...
Open redirect
A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...
CVE-2015-10104
CVE-2015-10104 affects Icons for Features Plugin (WordPress) v1.0.0, where manipulation of the redirect_url parameter in the file classes/class-icons-for-features-admin.php enables an open redirect. The issue is remote in nature. A fix is available by upgrading to v1.0.1 (patch 63124c021ae24b68e5...
CVE-2015-10104 Icons for Features Plugin class-icons-for-features-admin.php redirect
A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...
CVE-2015-10104 Icons for Features Plugin class-icons-for-features-admin.php redirect
A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirecturl leads to open redirect. T...
Wordpress Plugin Icons for Features 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability...
PT-2023-10283 · WordPress · Icons For Features Plugin
Name of the Vulnerable Software and Affected Versions: Icons for Features Plugin version 1.0.0 Description: A problematic issue has been found in the Icons for Features Plugin on WordPress, affecting some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulati...
April 25, 2023—KB5025297 (OS Build 19045.2913) Preview
None None...
Malicious code in dream11-fc-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc3d2ee3ad7ffe496784962936c16152411b411fea5dc756874f7bcfdf7c21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-288 Malicious code in dream11-fc-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc3d2ee3ad7ffe496784962936c16152411b411fea5dc756874f7bcfdf7c21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...