CVE-2021-36901 WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

CVE-2021-36901

CVE-2021-36901 affects WordPress Age Gate plugin ≤ 2.17.0. The flaw is an unauthenticated Stored XSS due to insufficient input/data validation/filtering in the plugin, enabling injection of JavaScript into client pages. Affected product/version: WordPress Age Gate plugin (≤ 2.17.0). Root cause: l...

WordPress plugin Age Gate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress Age Gate plugin 2.1.70 and earlier versions are vulnerable to a cross-site scripting vulnerability...

Old Age Home Management System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Old Age Home Management System 1.0 - SQLi Authentication Bypass Exploit Author: twseptian Vendor Homepage: https://phpgurukul.com/old-age-home-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/projects/Old-Age-Home-MS-using-PHP.zip Version: v1.0 Tested on...

Age Gate < 2.17.1 - Unauthenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks...

Age Gate < 2.20.4 - Reflected Cross-Site Scripting

The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC With the "Age Gate User Registration" addon installed: https://example.com/wp-admin/admin.php?page=age-gate" With any addon installed:...

Age Gate < 2.20.4 - Reflected Cross-Site Scripting

The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting With the "Age Gate User Registration" addon installed: https://example.com/wp-admin/admin.php?page=age-gate&a"alert/XSS/ With any addon installed:...

Why you need to install and use Instagram story saver

By Owais Sultan It is quite difficult to deny the fact that we live in the age of the Internet. According… This is a post from HackRead.com Read the original post: Why you need to install and use Instagram story saver...

Threat Source newsletter (March 31, 2022) — Is "Fortnite" a Metaverse?

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. By now, anyone on the internet has pondered the question: “Is a hot dog a sandwich?” My two cents: Yes, absolutely. Now as we move into the new internet age and onto Web 3.0 and NFTs instead of... This is only the...

Telling stories securely, with Runa Sandvik: Lock and Code S03E07

In 2017, a former NSA contractor named Reality Winner was arrested for allegedly leaking an internal report to the online news outlet The Intercept. To verify the report itself, a journalist for The Intercept sent an image of the report to the NSA, but upon further inspection, it was revealed tha...

Online Safety Bill’s provisions for “legal but harmful” content described as “censor’s charter”

The UKs Online Safety Bill, a landmark piece of legislation that that aims to regulate the countrys online content, has just been introduced into Parliament after undergoing significant revisions. The bill has been in progress for about five years and its main objective is to regulate online...

WordPress Easy Age Verify plugin < 1.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Age Verify plugin versions 1.6.3. Solution Update the WordPress Easy Age Verify plugin to the latest available version at least 1.6.3...

WordPress Easy Age Verify plugin < 1.6.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Easy Age Verify plugin versions 1.6.3. Solution Update the WordPress Easy Age Verify plugin to the latest available version at least 1.6.3...

WordPress Marijuana Age Verify plugin < 1.3.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Marijuana Age Verify plugin versions 1.3.4. Solution Update the WordPress Marijuana Age Verify plugin to the latest available version at least 1.3.4...

WordPress Age Verification Screen for WooCommerce plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Age Verification Screen for WooCommerce plugin versions = 1.0.0. Solution Update the WordPress Age Verification Screen for WooCommerce plugin to the latest available version at least 1.0.1...

WordPress Agy – Age verification for WooCommerce plugin <= 4.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Agy – Age verification for WooCommerce plugin versions = 4.3. Solution Update the WordPress Agy – Age verification for WooCommerce plugin to the latest available version at least 4.3.1...

WordPress Age Verification Screen for WooCommerce plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Age Verification Screen for WooCommerce plugin versions = 1.0.0. Solution Update the WordPress Age Verification Screen for WooCommerce plugin to the latest available version at least 1.0.1...

WordPress Marijuana Age Verify plugin < 1.3.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Marijuana Age Verify plugin versions 1.3.4. Solution Update the WordPress Marijuana Age Verify plugin to the latest available version at least 1.3.4...

WordPress Agy – Age verification for WooCommerce plugin <= 4.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Agy – Age verification for WooCommerce plugin versions = 4.3. Solution Update the WordPress Agy – Age verification for WooCommerce plugin to the latest available version at least 4.3.1...

An Elaborate Employment Con in the Internet Age

The story is an old one, but the tech gives it a bunch of new twists: Gemma Brett, a 27-year-old designer from west London, had only been working at Madbird for two weeks when she spotted something strange. Curious about what her commute would be like when the pandemic was over, she searched for...