292 matches found
Malicious code in cms-core-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3940178777e39b1b416f9ed8d09fdf519cf9f5a3e2de2361da01655b196991d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10274 Malicious code in cms-core-redux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3940178777e39b1b416f9ed8d09fdf519cf9f5a3e2de2361da01655b196991d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9475 Malicious code in @taxify/redux-session (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9248 Malicious code in redux-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redux-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can ...
CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads in versions 4.4.12 through 4.4.17 . The root cause is a lack of authorization and capability checks on the Redux_Color_Scheme_Import function. This flaw allows unauthenticated attackers to upload JSON file...
CVE-2024-6828: Unrestricted Upload of File with Dangerous Type
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can ...
PT-2024-37889 · WordPress · Redux Framework
Name of the Vulnerable Software and Affected Versions: Redux Framework plugin for WordPress versions 4.4.12 through 4.4.17 Description: The issue arises from missing authorization and capability checks on the Redux Color Scheme Import function, allowing unauthenticated attackers to upload JSON...
WordPress plugin Redux Framework 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Redux Framework plugin <= 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting vulnerability
Unauthenticated JSON File Upload to Stored Cross-Site Scripting vulnerability discovered by villu164 in WordPress Plugin Redux Framework versions = 4.4.17...
WordPress Redux Framework Plugin <= 4.4.17 is vulnerable to Cross Site Scripting (XSS)
Software Redux Framework Type Plugin Vulnerable versions = 4.4.17 Fixed in 4.4.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6828 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3b2115820306 Credits villu164 Require...
VulnCheck KEV: CVE-2024-6828
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the ReduxColorSchemeImport function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can ...
Malicious code in tools-access-react-redux-router (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3139 Malicious code in tools-access-react-redux-router (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tools-access-react-redux (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3138 Malicious code in tools-access-react-redux (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ifood-bank-account-validator-redux-form-8 (npm)
--- -= Per source details. Do not edit below this line.=-...