EUVD-2024-33538

Malicious code in bioql PyPI...

CVE-2024-56005

CVE-2024-56005 is a CSRF-type vulnerability affecting Posti Shipping (WordPress plugin) up to version 3.10.3. The issue allows cross-site request forgery to change plugin settings. If exploited, an attacker could trigger settings changes without authentication or user interaction. The CVE has a C...

CVE-2024-56005 WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through = 3.10.3...

CVE-2024-56005 WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Posti Posti Shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through 3.10.3...

WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

CSRF to Settings Change vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Posti Shipping versions = 3.10.3...

PT-2024-16577

Name of the Vulnerable Software and Affected Versions Posti Shipping plugin for WordPress versions up to, and including, 3.10.3 Description The issue is due to missing or incorrect nonce validation on the generate notices html function. This makes it possible for unauthenticated attackers to inje...

WordPress Posti Shipping Plugin <= 3.10.2 is vulnerable to Full Path Disclosure (FPD)

Software Posti Shipping Type Plugin Vulnerable versions = 3.10.2 Fixed in 3.10.3 OWASP Top 10 A3: Sensitive Data Exposure Classification Full Path Disclosure FPD CVE CVE-2024-50512 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f13c6383cb59 Credits Fariq Fadillah Gusti...