238 matches found
CVE-2023-22693
Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...
CVE-2023-22693 WordPress WP Google Tag Manager Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...
CVE-2023-22693
The CVE-2023-22693 entry concerns the WordPress WP Google Tag Manager plugin, affected versions being
CVE-2023-22693 WordPress WP Google Tag Manager Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...
WordPress plugin WP Google Tag Manager 跨站请求伪造漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress plugin WP Google Tag Manager version 1.1 and prior versions. The vulnerability stem...
PT-2023-18638 · Conlabzgmbh · Conlabzgmbh Wp Google Tag Manager
Name of the Vulnerable Software and Affected Versions: conlabzgmbh WP Google Tag Manager plugin versions = 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...
Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!
An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users. "The threat actor used original logos from the compromised store and customized a web element known ...
CVE-2023-23801
Cross-Site Request Forgery CSRF vulnerability in HasThemes Really Simple Google Tag Manager plugin = 1.0.6 versions...
CVE-2023-23801
Cross-Site Request Forgery CSRF vulnerability in HasThemes Really Simple Google Tag Manager plugin = 1.0.6 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in HasThemes Really Simple Google Tag Manager plugin = 1.0.6 versions...
CVE-2023-23801 WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in HasThemes Really Simple Google Tag Manager plugin = 1.0.6 versions...
CVE-2023-23801
The CVE CVE-2023-23801 refers to a Cross-Site Request Forgery (CSRF) vulnerability in the HasThemes Really Simple Google Tag Manager WordPress plugin, affecting versions up to 1.0.6. The available sources consistently describe CSRF as the underlying issue and note that the vulnerability has been ...
WordPress plugin Really Simple Google Tag Manager 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Really Simple Google Tag Manager Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23801 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0e8a9934df4f Credits...
New Kritec Magecart skimmer found on Magento stores
Threat actors often compete for the same resources, and this couldn't be further from the truth when it comes to website compromises. After all, if a vulnerability exists one can expect that it will be exploited more than once. In the past, we have seen such occurrences with Magecart threat actor...
WordPress WP Google Tag Manager Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Google Tag Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22693 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2f2695087bf2 Credits Mika Required...
Magecart Attack Disguised as Google Tag Manager
Magecart skimmers constantly evolve. Recent attacks aimed at stealing sensitive customer information illustrate the need for comprehensive security solutions...
Web skimmer found on website of Liquor Control Board of Ontario
On January 12, 2023, the Liquor Control Board of Ontario LCBO published a news release about a cybersecurity incident, affecting online sales through LCBO.com. It is one of the largest retailers and wholesalers of beverage alcohol in the world. Web skimmer The cybersecurity incident was a web...
WordPress Google Tag Manager Plugin Cross-Site Scripting (CVE-2022-1707)
A cross-site scripting vulnerability exists in the WordPress Google Tag Manager Plugin. This vulnerability is due to insufficient validation of site search requests. Successful exploitation of this vulnerability could result in code execution...
WordPress plugin Google Tag Manager cross-site scripting vulnerability
WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Tag Manager version 1.15 has a cross-site scripting vulnerability that stems from the fact that site searches are n...