LibreOffice 输入验证错误漏洞

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. An input validation error vulnerability exists in LibreOffice that stems from the execution of...

WordPress plugin One Click Demo Import 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A code issue vulnerability exists in WordPre...

PT-2024-25887 · Unknown · One Click Demo Import

Name of the Vulnerable Software and Affected Versions: One Click Demo Import versions 3.2.0 and earlier Description: The issue is related to the Deserialization of Untrusted Data, which affects the functionality of the software. Recommendations: For versions 3.2.0 and earlier, update to a version...

WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by ngductung Patchstack Alliance in WordPress Plugin One Click Demo Import versions = 3.2.0...

WordPress plugin ClickCease Click Fraud Protection 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress ClickCease Click Fraud Protection plugin <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings vulnerability

Improper Authorization to sensitive information exposure via getsettings vulnerability discovered by Francesco Carlucci in WordPress Plugin ClickCease Click Fraud Protection versions = 3.2.4...

CVE-2024-3849

The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This makes it possible for authenticated attackers, with contributor access or above, to include and execute arbitrary files on the server, allowing the execution ...

CVE-2024-3849 Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion

The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This makes it possible for authenticated attackers, with contributor access or above, to include and execute arbitrary files on the server, allowing the execution ...

PT-2024-28030 · WordPress · Click To Chat – Holithemes

Name of the Vulnerable Software and Affected Versions: Click to Chat – HoliThemes plugin for WordPress versions up to, and including, 3.35 Description: The issue allows authenticated attackers with contributor access or above to include and execute arbitrary files on the server. This enables the...

PT-2024-24463 · Logint · Logint Lomag Inventory Management

Name of the Vulnerable Software and Affected Versions: LOGINT LoMag Inventory Management versions 1.0.20.120 and before Description: The issue allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop, and frmSettings components. This is a SQL Injection...

CVE-2024-33678

Cross-Site Request Forgery CSRF vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection.This issue affects ClickCease Click Fraud Protection: from n/a through = 3.2.7...

CVE-2024-33678

CVE-2024-33678 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the ClickCease Click Fraud Protection plugin by eranfl. Public records note this affects ClickCease Click Fraud Protection releases up to version 3.2.7 (no fixed version disclosed in the provided documents). The Re...

WordPress ClickCease Click Fraud Protection Plugin <= 3.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software ClickCease Click Fraud Protection Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-33678 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c376a3fb1460 Credits...

WordPress plugin ClickCease Click Fraud Protection 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists...

Google ad for Facebook redirects to scam

Today, we are looking at a malicious ad campaign targeting Facebook users via Google search. It is well-known that tech support scammers attract new victims by buying ads for certain keywords related to their audience. What is perhaps less known is how it is even possible to impersonate top brand...

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin Olive One Click Demo Import versions = 1.1.1...

WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Download

Software Olive One Click Demo Import Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-32715 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID a4c06fc8a3c4 Credits Yudistira Arya...

WordPress Click to Chat plugin <= 3.35 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by haidv35 from Viettel Cyber Security in WordPress Plugin Click to Chat versions = 3.35...

WordPress Click to Chat Plugin <= 3.35 is vulnerable to Local File Inclusion

Software Click to Chat Type Plugin Vulnerable versions = 3.35 Fixed in 4.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3849 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3a9b57b69a7e Credits haidv35 from Viettel Cyber Security Required...

WordPress WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin <= 7.0 - Sensitive Information Exposure via insufficiently protected files vulnerability

Sensitive Information Exposure via insufficiently protected files vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content versions = 7.0...