33 matches found
CVE-2024-56064
CVE-2024-56064 WP SuperBackup = 2.3.3 - 未認証の任意ファイルアップロード 説明 WordPress用プラグイン「Super Backup & Clone - Migrate for WordPress」は、2.3.3 以前のすべてのバージョンにおいてファイルタイプの検証が欠如しているため、任意のファイルアップロードに対して脆弱です。これにより、未認証の攻撃者が影響を受けるサイトのサーバー上に任意のファイルをアップロードできる可能性があり、リモートコード実行が可能になる可能性があります。 詳細 タイプ : plugin スラッグ :...
CVE-2024-56067
CVE-2024-56067 WP SuperBackup = 2.3.3 - 認可の欠如による未認証バックアップファイルのダウンロード 説明 WordPress用プラグイン「Super Backup & Clone - Migrate for WordPress」は、2.3.3までの全バージョンにおいて、関数の権限チェックが欠如しているため、不正アクセスに対して脆弱です。これにより、未認証の攻撃者がバックアップ全体をダウンロードできる可能性があります。 詳細 タイプ : プラグイン スラッグ : indeed-wp-superbackup 影響を受けるバージョン : 2.3.3...
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE
The Super Backup & Clone - Migrate for WordPress plugin indeed-wp-superbackup is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to and including 2.3.3. Unauthenticated attackers can...
EUVD-2024-52965
Malicious code in bioql PyPI...
EUVD-2024-52968
Malicious code in bioql PyPI...
EUVD-2024-52967
Malicious code in bioql PyPI...
EUVD-2024-52966
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2024-56064
Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56064
Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56070
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56069
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56069 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Azzaroco WP SuperBackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through 2.3.3...
CVE-2024-56069
CVE-2024-56069: Reflected XSS in WP SuperBackup (WordPress plugin) affecting WP SuperBackup
CVE-2024-56069 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...
WordPress plugin WP SuperBackup 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
CVE-2024-56070
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56070 WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56070
CVE-2024-56070 affects WP SuperBackup (indeed-wp-superbackup)
CVE-2024-56068
Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through = 2.3.3...
CVE-2024-56064
Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...