2789 matches found
CVE-2022-36284 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...
CVE-2022-36284 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...
PT-2022-23290 · Storeapps · Storeapps Affiliate For Woocommerce
Name of the Vulnerable Software and Affected Versions: StoreApps Affiliate For WooCommerce premium plugin versions = 4.7.0 Description: The issue allows an attacker to change the PayPal email due to an authenticated IDOR vulnerability. This can be exploited when the WooCommerce PayPal Payments...
WordPress plugin StoreApps Affiliate For WooCommerce premium 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
MAL-2022-5437 Malicious code in pplogger-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f79d96a39bd0701b0be053e0cad25703bda81b63b17638a10a26a1e023a91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pplogger-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f79d96a39bd0701b0be053e0cad25703bda81b63b17638a10a26a1e023a91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Affiliate For WooCommerce < 4.8.0 - Subscriber+ Paypal Email Update via IDOR
The plugin allows users with a role as low as subscriber to change the PayPal Email via an IDOR attack when the WooCommerce PayPal Payments plugin is also installed...
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
Authenticated IDOR vulnerability leading to PayPal email change discovered by Vlad Vector Patchstack in WordPress Affiliate For WooCommerce premium plugin versions = 4.7.0. Solution Update the WordPress Affiliate For WooCommerce plugin to the latest available version at least 4.8.0...
MAL-2022-3740 Malicious code in hyperwallet-sdk-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hyperwallet-sdk-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A week in security (July 18 – July 24)
Last week on Malwarebytes Labs: Extortionists target restaurants, demand money to take down bad reviews The FTC will go after companies misusing location, health, and other sensitive data Roblox breached: Internal documents posted online by unknown attackers Warning for WordPress admins: Uninstal...
Malicious code in dw-header-footer-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece43619e69dba03ea7cc723377c5703397137721c477107801e86416e5886dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in header-footer-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3580 Malicious code in header-footer-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PayPal phishing campaign goes after more than just your login credentials
A new phishing campaign targeting PayPal users aims to get extensive data from potential victims. The data its after includes government documents like passport, as well as selfie photos. In a nutshell, its an extensive form of information theft, the likes of which could result in someones identi...
The Kit That Wants It All: Scam Mimics PayPal?s Known Security Measures
Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...
The Kit That Wants It All: Scam Mimics PayPal’s Known Security Measures
Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...
Malicious Package
Overview header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview dw-header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
