EUVD-2015-9177

Malware in sbrugna...

PT-2024-12208 · WordPress · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS plugin for WordPress versions up to, and including, 2.7.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the addon enable disable function. This allows unauthenticated...

PT-2019-7296

Name of the Vulnerable Software and Affected Versions profile-builder plugin versions prior to 2.1.4 Description The issue concerns a lack of access control for activating or deactivating addons via AJAX, allowing unauthorized actions. Recommendations For versions prior to 2.1.4, update to versio...