WordPress Agy – Age verification for WooCommerce plugin <= 4.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Agy – Age verification for WooCommerce plugin versions = 4.3. Solution Update the WordPress Agy – Age verification for WooCommerce plugin to the latest available version at least 4.3.1...

WordPress Agy – Age verification for WooCommerce plugin <= 4.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Agy – Age verification for WooCommerce plugin versions = 4.3. Solution Update the WordPress Agy – Age verification for WooCommerce plugin to the latest available version at least 4.3.1...

WordPress Marijuana Age Verify plugin < 1.3.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Marijuana Age Verify plugin versions 1.3.4. Solution Update the WordPress Marijuana Age Verify plugin to the latest available version at least 1.3.4...

WordPress Age Verification Screen for WooCommerce plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Age Verification Screen for WooCommerce plugin versions = 1.0.0. Solution Update the WordPress Age Verification Screen for WooCommerce plugin to the latest available version at least 1.0.1...

WordPress Easy Age Verify plugin < 1.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Age Verify plugin versions 1.6.3. Solution Update the WordPress Easy Age Verify plugin to the latest available version at least 1.6.3...

WordPress Marijuana Age Verify plugin < 1.3.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Marijuana Age Verify plugin versions 1.3.4. Solution Update the WordPress Marijuana Age Verify plugin to the latest available version at least 1.3.4...

An Elaborate Employment Con in the Internet Age

The story is an old one, but the tech gives it a bunch of new twists: Gemma Brett, a 27-year-old designer from west London, had only been working at Madbird for two weeks when she spotted something strange. Curious about what her commute would be like when the pandemic was over, she searched for...

Reddit: CSRF (protection bypassed) to force a below 18 user into viewing an nsfw subreddit !

Summary of the Issue A state-changing POST request to https://old.reddit.com/over18? lacked proper modhash validator leaving the sensitive action vulnerable to CSRF attacks. An attacker can trick users into executing the action, enabling/disabling "I am over eighteen years old" and willing to vie...

Online Safety Bill will legally require porn sites to verify users’ age

When Ioannis Dekas, a father of four boys, found that one of his sons had access to pornography, he and his wife became concerned. "In two weeks leading up to this moment, wed noticed a drastic change in his behavior," Dekas said in a BBC interview, "Withdrawal, a sense of anger towards his...

adblock (>=0.1.0, <=0.1.18), addr (>=0.1.0, <=0.4.0) +145 more potentially affected by unknown CVE via rental (>=0.2.4, <=0.5.6)

rental CARGO version =0.2.4, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.2.0, =0.12.0, =0.5.0, =0.1.0, =0.7.0, =0.5.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0134...

Age Gate < 2.17.1 - Unauthenticated Import Settings

The plugin patched an Unauthenticated Import Settings vulnerability. It was found to be exploited in the wild a few days after being patched...

WordPress Age Gate <= 2.17.0 - Unauthenticated Import Settings vulnerability

Unauthenticated Import Settings vulnerability discovered in WordPress Age Gate versions = 2.17.0. Solution Update the WordPress Age Gate plugin to the latest available version at least 2.17.1...

WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability was discovered by Nguyen Van Khanh Patchstack Alliance in the WordPress Age Gate plugin versions = 2.17.0. Solution Update the WordPress Age Gate plugin to the latest available version at least 2.17.1...

VulnCheck KEV: CVE-2021-36901

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

Navy Warship’s Facebook Page Hacked to Stream ‘Age of Empires’ Gaming

The official Facebook page of a destroyer-class Navy warship, the USS Kidd, has gone rogue: Someone has taken over the page in order to…stream Age of Empires play. Age of Empires is a real-time online multiplayer strategy game in which the objective is to advance one’s civilization. Players “buil...

US Navy ship Facebook page hijacked to stream video games

The official Facebook page of the US Navy’s destroyer-class warship, USS Kidd, has been hijacked. According to Task & Purpose, who first reported on the incident, the account has done nothing but stream Age of Empires, an award-winning, history-based real-time strategy RTS video game wherein...

WordPress Age Gate plugin <= 2.16.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Martin Vierula Trustwave in WordPress Age Gate plugin versions = 2.16.3. Solution Update the WordPress Age Gate plugin to the latest available version at least 2.16.4...

Age Gate < 2.16.4 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape the 'Additional content' setting of its 'Messaging' page, which could allow users having access to such setting by default admin, but the plugin has a feature to change this and allow access to lower privileged users to perform Cross-Site Scripting attacks...

New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”

The pandemic and remote work shattered your perimeter. Your attack surface has changed — and will keep changing. It’s our mission to help customers strengthen security defenses and stay ahead of evil. As the modern perimeter expands, new and old vulnerabilities emerge as open doors for attackers;...

Improper Input Validation in cookie

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...