WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0588 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b53bf462fd91 Credits kodaichodai...

WordPress Plugin Top Bar 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in...

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

On April 9, Twitter/X began automatically modifying links that mention "twitter.com" to read "x.com" instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft convincing phishing links -- such as fedetwitter.com,...

WordPress Top Bar plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joel Indra Patchstack Alliance in WordPress Plugin Top Bar versions = 3.0.5...

top-top-spa.com.tw Cross Site Scripting vulnerability OBB-3913411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Page Builder: Live Composer Plugin <= 1.5.35 is vulnerable to Cross Site Request Forgery (CSRF)

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.35 Fixed in 1.5.36 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31933 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c287b96c4dbe Credits Brand...

WordPress The Conference Theme <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software The Conference Type Theme Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31428 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f038ad152adb Credits Dhabaleshwar Das...

WordPress Lightning Theme <= 15.18.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Lightning Type Theme Vulnerable versions = 15.18.0 Fixed in 15.19.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31386 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2915c1250605 Credits Dhabaleshwar Das...

WordPress Spa and Salon Theme <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Spa and Salon Type Theme Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31384 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e57c469e3394 Credits Dhabaleshwar Das...

WordPress NewsXpress Theme <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software NewsXpress Type Theme Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31938 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fbdf2aa209f9 Credits Dhabaleshwar Das Required...

WordPress Smash Balloon Social Post Feed Plugin <= 4.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smash Balloon Social Post Feed Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-31379 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0081dd599b5c Credits Majed Refa...

WordPress Amelia Plugin <= 1.0.95 is vulnerable to Cross Site Request Forgery (CSRF)

Software Amelia Type Plugin Vulnerable versions = 1.0.95 Fixed in 1.0.96 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31425 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 24abe35a417b Credits Yudistira Arya Required...

WordPress MihanPanel Plugin < 12.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software MihanPanel Type Plugin Vulnerable versions 12.7 Fixed in 12.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31389 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 75fdd5c39350 Credits Majed Refaea Required...

WordPress Marker.io Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Marker.io Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31427 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 14aece616952 Credits Skalucy Required privileg...

WordPress Save as PDF plugin by Pdfcrowd Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31930 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ff06148a9e81 Credits younsoung kim, SeoHyeon...

WordPress Ultimate Product Catalogue Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ultimate Product Catalogue Type Plugin Vulnerable versions = 5.2.15 Fixed in 5.2.16 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31921 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 48458c7c74b6 Credits...

WordPress PopularFX Theme <= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software PopularFX Type Theme Vulnerable versions = 1.2.4 Fixed in 1.2.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31383 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c041bb281746 Credits Dhabaleshwar Das Required...

WordPress Save as Image plugin by Pdfcrowd Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Save as Image plugin by Pdfcrowd Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31931 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID fdf7ae81db36 Credits younsoung kim, SeoHye...

WordPress Element Pack Elementor Addons Plugin <= 5.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Element Pack Elementor Addons Type Plugin Vulnerable versions = 5.5.3 Fixed in 5.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1428 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID baacef610d60 Credits Nikolas...

WordPress Panoramic Theme <= 1.1.56 is vulnerable to Cross Site Request Forgery (CSRF)

Software Panoramic Type Theme Vulnerable versions = 1.1.56 Fixed in 1.1.57 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31386 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e5f66021e2ac Credits Dhabaleshwar Das Require...