EUVD-2024-54167

Malicious code in bioql PyPI...

EUVD-2024-30591

Malicious code in bioql PyPI...

CVE-2024-32805

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...

CVE-2024-13615

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

WordPress Social Snap plugin < 1.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Social Snap versions 1.4...

CVE-2024-13615

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

CVE-2024-13615

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

CVE-2024-13615 Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSS

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the...

CVE-2024-13615

CVE-2024-13615 affects the WordPress plugin “Social Snap” (Social Share Buttons / Social Sharing Icons / Click to Tweet) up to version 1.3.6. Public description: stored cross-site scripting (XSS) could be triggered by high-privilege admins via unsanitised/unescaped settings, even when unfiltered_...

WordPress plugin Social Snap 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32805

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...

CVE-2024-32805

CVE-2024-32805 is a Missing Authorization vulnerability in the WordPress plugin Social Snap , affecting versions from n/a through 1.3.5 . The connected records reiterate the same issue without providing exploit details, specific root cause, or a patch/version to remediate beyond noting the affect...

CVE-2024-32805 WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...

CVE-2024-32805 WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...

WordPress plugin Social Snap security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Social Snap < 1.3.6 - Missing Authorization

Description The Social Snap plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init function in versions up to, and including, 1.3.5. This makes it possible for unauthenticated attackers to modify the plugin's settings...

WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Social Snap versions = 1.3.5...

WordPress Social Snap Plugin <= 1.3.5 is vulnerable to Broken Access Control

Software Social Snap Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32805 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 4bb46049199a Credits Majed Refaea Required...