CVE-2024-10832

CVE-2024-10832 : Posti Shipping plugin for WordPress (versions ≤ 3.10.3) is vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation in generate_notices_html. This CSRF can allow unauthenticated attackers to trigger actions that lead to stored XSS by convincing an admini...

CVE-2024-10832 Posti Shipping <= 3.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via generate_notices_html Function

The Posti Shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.10.3. This is due to missing or incorrect nonce validation on the generatenoticeshtml function. This makes it possible for unauthenticated attackers to inject malicious web...

WordPress plugin Posti Shipping 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

WordPress Posti Shipping plugin <= 3.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via generate_notices_html Function vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting via generatenoticeshtml Function vulnerability discovered by vgo0 in WordPress Plugin Posti Shipping versions = 3.10.3...

CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

CVE-2024-52495

CVE-2024-52495 is an SQL Injection vulnerability in WordPress Distance Based Shipping Calculator (Eniture Technology). The Initial Description notes SQL Injection affecting Distance Based Shipping Calculator: from n/a through 2.0.21. Connected sources (Patchstack) indicate WordPress Distance Base...

CVE-2024-52495 WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

PT-2024-35336 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator

Name of the Vulnerable Software and Affected Versions: Eniture Technology Distance Based Shipping Calculator versions n/a through 2.0.21 Description: The issue involves an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...

WordPress plugin Distance Based Shipping Calculator SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

PT-2024-16976 · WordPress · Additional Order Filters For Woocommerce

Name of the Vulnerable Software and Affected Versions: Additional Order Filters for WooCommerce plugin for WordPress versions up to, and including, 1.21 Description: The issue arises from insufficient input sanitization and output escaping, making it possible for unauthenticated attackers to inje...

WordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.23...

WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 is vulnerable to SQL Injection

Software Distance Based Shipping Calculator Type Plugin Vulnerable versions = 2.0.21 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-52495 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID c1821da89db4 Credits João Pedro S Alcântara Kinort...

WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin Shipping with Venipak for WooCommerce versions = 1.22.3...

Did security gaps at Antwerp port enable drug smuggling operations?

TL;DR Why hack shipping? For profit. Criminals have been proven to have hacked port systems to bypass security and facilitate drug smuggling. Evidence of hacking? Rarely reported, but cases like MSC and Glencore’s cobalt theft and the incidents at the Port of Antwerp below provide real examples...

CVE-2024-38740

Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6...

CVE-2024-38740 WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6...

CVE-2024-38740

CVE-2024-38740 describes a Missing Authorization vulnerability in the WordPress plugin “Packlink PRO shipping module” used by Packlink Shipping S.L. The issue allows exploitation of incorrectly configured access control security levels (Broken Access Control) and affects Packlink PRO shipping mod...

WordPress plugin Packlink PRO shipping module 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-28184 · Packlink · Packlink Pro Shipping Module

Name of the Vulnerable Software and Affected Versions: Packlink PRO shipping module versions 3.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Packlink PRO shipping module, which allows exploitation due to incorrectly configured access control...

CVE-2024-50512

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...