PT-2019-14052 · WordPress · Ad Inserter

Name of the Vulnerable Software and Affected Versions: ad-inserter plugin versions prior to 2.4.20 Description: The issue allows for path traversal. Recommendations: For versions prior to 2.4.20, update to version 2.4.20 or later to resolve the issue...

CVE-2017-18553

The ad-buttons plugin before 2.3.2 for WordPress has XSS...

CVE-2017-18553

The ad-buttons plugin before 2.3.2 for WordPress has XSS...

Cross site scripting

The ad-buttons plugin before 2.3.2 for WordPress has XSS...

CVE-2017-18553

The ad-buttons plugin before 2.3.2 for WordPress has XSS...

CVE-2017-18553

CVE-2017-18553 : The WordPress ad-buttons plugin prior to 2.3.2 contains a cross-site scripting (XSS) vulnerability in its input handling. Multiple sources corroborate the flaw across CVE records and national vulnerability databases. The vulnerability information provided indicates an XSS impact ...

Clickjacking Evolves to Hook Millions of Top-Site Visitors

Clickjacking, where links on a website redirect unknowing users to spam, advertising or malware, has been around for decades. However, new tactics that defy the best mitigation efforts of browsers has led to it affecting millions of internet users browsing the web’s top sites, researchers found i...

WordPress Woody Ad Snippets Plugin < 2.2.6 File Deletion Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webcraftic:woodyadsnippets"; if description...

How Axonius integrates with Microsoft to help customers solve the cybersecurity asset management challenge

Despite the amazing and futuristic progression of technologies in cybersecurity, it's still incredibly hard to answer the most basic of questions like: how many assets do I have, and do they adhere to my security policy? Somewhere along the line, asset management became very mundane compared to t...

WordPress Woody ad snippets plugin security feature issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woody ad snippets is used in one of the pages to add ads to the plugin. The WordPress Woody ad snippets plugin has a security signature...

Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion

The adminInit function of the admin/includes/class.actions.snippets.php file, registered as an admininit hook did not have any CSRF or capability checks for its close action, allowing unauthenticated users to delete arbitrary posts from the blog...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

Arbitrary file deletion

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

CVE-2019-14773 affects the WordPress Woody Ad Snippets plugin up to version 2.2.5. The admin_init hook in admin/includes/class.actions.snippets.php lacked CSRF or capability checks for the close action, enabling unauthenticated users to delete arbitrary posts via wp-admin/admin-post.php?action=cl...

OLX: Bypass Rejected ads so user can view it as normal live ad.

A logic error allowed creating chats from ads that were still pending moderation or were rejected...

Facebook Sues Two Android App Developers for Click Injection Fraud

Facebook has filed a lawsuit against two shady Android app developers accused of making illegal money by hijacking users' smartphones to fraudulently click on Facebook ads. According to Facebook, Hong Kong-based 'LionMobi' and Singapore-based 'JediMobi' app developers were distributing malicious...

Facebook Sues Two Android App Developers for Click Injection Fraud

Facebook has filed a lawsuit against two shady Android app developers accused of making illegal money by hijacking users' smartphones to fraudulently click on Facebook ads. According to Facebook, Hong Kong-based 'LionMobi' and Singapore-based 'JediMobi' app developers were distributing malicious...

Black Hat: LeapFrog Tablet Flaws Let Attackers Track, Message Kids

LAS VEGAS – Serious vulnerabilities have been disclosed in LeapFrog’s tablet for kids, the LeapPad Ultimate, once again throwing child data privacy into the spotlight. The LeapPad Ultimate is a rugged tablet made by LeapFrog that targets children with an array of education, game and eBook apps...