747 matches found
CVE-2024-54226
CVE-2024-54226 describes a CSRF to Stored XSS in the WordPress plugin Country Blocker (affected versions: up to 3.2, vendor: Karl Kiesinger). The entry indicates a high-severity issue (CVSS v3.1 base score 7.1) with potential stored cross-site script execution, and in the Wordfence context the vu...
CVE-2024-54226: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in karlkiesinger Country Blocker country-blocker allows Stored XSS.This issue affects Country Blocker: from n/a through = 3.2...
WordPress plugin Country Blocker 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress Country Blocker plugin <= 3.2 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Country Blocker versions = 3.2...
A week in security (November 11 – November 17)
Last week on Malwarebytes Labs: Malicious QR codes sent in the mail deliver malware 122 million people’s business contact info leaked by data broker Advertisers are pushing ad and pop-up blockers using old tricks Scammer robs homebuyers of life savings in $20 million theft spree Temu must respect...
Advertisers are pushing ad and pop-up blockers using old tricks
Despite the countermeasures some services are taking against well-known ad blockers, lots of people now use one. This is no doubt due to increased privacy concerns around online tracking, along with the growing number of ads per site. And where there is money to be made, you’ll find social...
A week in security (June 10 – June 16)
Last week on Malwarebytes Labs: Truist bank confirms data breach Update now! Google Pixel vulnerability is under active exploitation Adobe clarifies Terms of Service change, says it doesn’t train AI on customer content 23andMe data breach under joint investigation in two countries When things go...
CVE-2023-37865
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1...
CVE-2023-37865 WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1...
PT-2024-12652 · Ip2Location · Ip2Location Country Blocker
Name of the Vulnerable Software and Affected Versions: Download IP2Location Country Blocker versions 2.29.1 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations:...
CVE-2023-37865: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1...
CVE-2024-30479
Authentication Bypass by Spoofing vulnerability in LionScripts IP Blocker Lite allows Functionality Bypass.This issue affects IP Blocker Lite: from n/a through 11.1.1...
CVE-2024-30479
CVE-2024-30479 : Authentication Bypass by Spoofing in WordPress plugin LionScripts IP Blocker Lite. Affects IP Blocker Lite versions up to and including 11.1.1; exploitation allows a functionality bypass. Mitigation per sources is to upgrade to version 11.1.1 or later. Note: multiple connected so...
CVE-2024-30479 WordPress LionScripts: IP Blocker Lite plugin <= 11.1.1 - Bypass vulnerability
Authentication Bypass by Spoofing vulnerability in LionScripts IP Blocker Lite allows Functionality Bypass.This issue affects IP Blocker Lite: from n/a through 11.1.1...
CVE-2024-30479 WordPress LionScripts: IP Blocker Lite plugin <= 11.1.1 - Bypass vulnerability
Authentication Bypass by Spoofing vulnerability in LionScripts IP Blocker Lite allows Functionality Bypass.This issue affects IP Blocker Lite: from n/a through 11.1.1...
WordPress plugin IP Blocker Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-23404 · Lionscripts · Lionscripts Ip Blocker Lite
Name of the Vulnerable Software and Affected Versions: LionScripts IP Blocker Lite versions prior to 11.1.1 Description: The issue is related to an Authentication Bypass by Spoofing, allowing functionality bypass. Recommendations: For versions prior to 11.1.1, update to version 11.1.1 or later to...
CVE-2024-30479: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in LionScripts IP Blocker Lite allows Functionality Bypass.This issue affects IP Blocker Lite: from n/a through 11.1.1...
Download IP2Location Country Blocker < 2.34.3 - Cross-Site Request Forgery
Description The Download IP2Location Country Blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.34.2. This is due to missing or incorrect nonce validation on the validateapikey function. This makes it possible for unauthenticated attackers...