246 matches found
Malicious code in redux-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9248 Malicious code in redux-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can ...
CVE-2024-6828
CVE-2024-6828 (Redux Framework, WordPress): The Redux Framework plugin versions 4.4.12–4.4.17 are vulnerable to unauthenticated JSON file uploads due to missing authorization/capability checks in the Redux_Color_Scheme_Import function, enabling stored XSS and, in rare cases when wp_filesystem fai...
WordPress plugin Redux Framework 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-37889 · WordPress · Redux Framework
Name of the Vulnerable Software and Affected Versions: Redux Framework plugin for WordPress versions 4.4.12 through 4.4.17 Description: The issue arises from missing authorization and capability checks on the Redux Color Scheme Import function, allowing unauthenticated attackers to upload JSON...
WordPress Redux Framework plugin <= 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting vulnerability
Unauthenticated JSON File Upload to Stored Cross-Site Scripting vulnerability discovered by villu164 in WordPress Plugin Redux Framework versions = 4.4.17...
VulnCheck KEV: CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which...
WordPress Redux Framework Plugin <= 4.4.17 is vulnerable to Cross Site Scripting (XSS)
Software Redux Framework Type Plugin Vulnerable versions = 4.4.17 Fixed in 4.4.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6828 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3b2115820306 Credits villu164 Require...
Malicious code in tools-access-react-redux-router (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3139 Malicious code in tools-access-react-redux-router (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tools-access-react-redux (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3138 Malicious code in tools-access-react-redux (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2504 Malicious code in ifood-bank-account-validator-redux-form-8 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ifood-bank-account-validator-redux-form-8 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bk-redux-client-middleware (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1825 Malicious code in bk-redux-client-middleware (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in redux-modal-dispatcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcee00987882a553fbc08f339c47202ff3c398a2a05d684fa118692d0256b0bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8463 Malicious code in redux-modal-dispatcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcee00987882a553fbc08f339c47202ff3c398a2a05d684fa118692d0256b0bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...