932 matches found
WordPress RDP Linkedin Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin RDP Linkedin Login versions = 1.7.0...
WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin LinkedIn Lite versions = 1.0...
CVE-2024-13773
The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...
WordPress plugin Civi 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-11256
Name of the Vulnerable Software and Affected Versions: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin versions up to, and including, 2.1.4 Description: The issue concerns Sensitive Information Exposure due to hard-coded credentials, allowing unauthenticated attackers to extra...
CVE-2024-13773: Use of Hard-coded Cryptographic Key
The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...
CVE-2024-11087: Improper Authentication
The miniOrange Social Login and Register Discord, Google, Twitter, LinkedIn Pro Addon plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 200.3.9. This is due to insufficient verification on the user being returned by the social login token. This make...
PT-2025-10406
Name of the Vulnerable Software and Affected Versions miniOrange Social Login and Register Discord, Google, Twitter, LinkedIn Pro Addon plugin for WordPress versions up to, and including, 200.3.9 Description The issue is related to insufficient verification of the user being returned by the socia...
LinkedIn Phishing Scam: Fake InMail Messages Spreading ConnectWise Trojan
Cofense uncovers new LinkedIn phishing scam delivering ConnectWise RAT. Learn how attackers bypass security with fake InMail emails…...
CVE-2025-1515 WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover
The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official...
CVE-2025-1515
CVE-2025-1515 affects the WordPress plugin WP Real Estate Manager (versions up to and including 2.8). The root cause is insufficient identity verification in the LinkedIn login flow , enabling an unauthenticated attacker to perform an authentication bypass and log in as any user, including admini...
PT-2025-9820
Name of the Vulnerable Software and Affected Versions WP Real Estate Manager plugin for WordPress versions prior to 2.9 Description The issue is related to insufficient identity verification on the LinkedIn login request process, allowing unauthenticated attackers to bypass official authenticatio...
CVE-2025-1515: Authentication Bypass Using an Alternate Path or Channel
The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official...
Malicious code in linkedin-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1881 Malicious code in linkedin-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1880 Malicious code in linkedin-sync (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in linkedin-sync (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in linkedin-service (npm)
--- -= Per source details. Do not edit below this line.=-...