WordPress WCFM Marketplace Plugin <= 3.4.12 is vulnerable to Cross Site Request Forgery (CSRF)

Software WCFM Marketplace Type Plugin Vulnerable versions = 3.4.12 Fixed in 3.5.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4936 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 13c6dc4f50f8 Credits Chloe Chamberland...

motorsport-events.se Cross Site Scripting vulnerability OBB-3250178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1882

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:21+00:00| seen| https://t.me/cibsecurity/61471...

CVE-2023-26857

creationtimestamp| type| source ---|---|--- 2023-04-05 18:40:07+00:00| seen| https://t.me/cibsecurity/61460...

shiaduboutiquesandguesthouses-hotel.guestcentric.net Cross Site Scripting vulnerability OBB-3249878

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

emiraty.kentlucky.cz Cross Site Scripting vulnerability OBB-3249757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sockenbilder.se Cross Site Scripting vulnerability OBB-3249629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

szkolnictwo.pl Cross Site Scripting vulnerability OBB-3249332

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wimoor.com Cross Site Scripting vulnerability OBB-3249260

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

modicasa.net Cross Site Scripting vulnerability OBB-3248693

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ranlife.com Cross Site Scripting vulnerability OBB-3248471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

worldantique.net Cross Site Scripting vulnerability OBB-3248384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Ajax Search Lite Plugin <= 4.11 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Search Lite Type Plugin Vulnerable versions = 4.11 Fixed in 4.11.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1420 Patch priority Medium CVSS severity Medium 4.3 Developer WPdreams PSID 3abcb0638a8c Credits Erwan LR Required...

CVE-2023-0493

creationtimestamp| type| source ---|---|--- 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51254 2023-12-11 00:57:29+00:00| seen| https://t.me/arpsyndicate/1683 2025-03-31 17:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9712...

WordPress Sp*tify Play Button for WordPress Plugin <= 2.07 is vulnerable to Cross Site Scripting (XSS)

Software Sptify Play Button for WordPress Type Plugin Vulnerable versions = 2.07 Fixed in 2.08 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1840 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a420be81ae3b Credits Marco...

WordPress Ajax Search Pro Plugin < 4.26.2 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Search Pro Type Plugin Vulnerable versions 4.26.2 Fixed in 4.26.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1435 Patch priority High CVSS severity High 6.1 Developer Claim ownership PSID 019181a32a8a Credits Erwan LR Required...

thehideoutva.com Cross Site Scripting vulnerability OBB-3248373

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mmrda.maharashtra.gov.in Cross Site Scripting vulnerability OBB-3248353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rksaccountants.com.au Cross Site Scripting vulnerability OBB-3248307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

torontohousings.com Cross Site Scripting vulnerability OBB-3248182

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...