WooCommerce Multi Currency < 2.1.18 - Authenticated Product Price Change

The plugin was vulnerable to Authenticated Product Price Change, which could allow customers to change the price of all products...

The Rise of Disruptive Ransomware Attacks: A Call To Action

Our collective use of and dependence on technology has come quite a long way since 1989. That year, the first documented ransomware attack — the AIDS Trojan — was spread via physical media 5 1⁄4" floppy disks delivered by the postal service to individuals subscribed to a mailing list. The malware...

Cross-site Scripting (XSS)

Overview s-cart/core is a free Laravel e-commerce for business. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization in AdminCurrencyController. PoC Login as manager/administrator, then go to Localisation Currencies. When adding or editing...

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

✍️ Description Attacker able to set default currency with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your application. In CSRF...

CVE-2021-34645

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the savecurrencysettings function found in the /admin/inc/wpeasycartadmininitialsetup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0...

WordPress plugin Shopping Cart & eCommerce Store 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. Cross-site request forgery vulnerability exists in...

SQL Injection

Overview s-cart/core is a free Laravel e-commerce for business. Affected versions of this package are vulnerable to SQL Injection via the keyword parameter in /scadmin/currency. Remediation Upgrade s-cart/core to version 6.3.0.3 or higher. References - GitHub Additional Information - GitHub Commi...

LNCToken has an unspecified vulnerability

LNCToken is an electronic currency, and there is a security vulnerability in LNCToken that could be exploited by an attacker to cause unexpected financial loss during a transaction...

Doftcoin has an unspecified vulnerability

Doftcoin is an application. An e-currency implementation, Doftcoin contains a security vulnerability that could be exploited by an attacker to hijack a victim's account and arbitrarily increase the digital supply of assets...

LNCToken 输入验证错误漏洞

LNCToken is an electronic currency, and there is a security vulnerability in LNCToken that could be exploited by an attacker to cause unexpected financial loss during a transaction...

WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

The WooCommerce Currency Switcher plugin was vulnerable to LFI attacks via the "woocs" shortcode...

WordPress WOOCS – WooCommerce Currency Switcher plugin <= 1.3.6.2 - Local File Inclusion (LFI) leading vulnerability to Remote Code Execution (RCE)

Local File Inclusion LFI leading vulnerability to Remote Code Execution RCE discovered by Marc Montpas Automattic in WordPress WOOCS – WooCommerce Currency Switcher plugin versions = 1.3.6.2. Solution Update the WordPress WOOCS – WooCommerce Currency Switcher plugin to the latest available versio...

WordPress Currency Switcher plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Currency Switcher plugin 1.1.6 and prior...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

CVE-2021-20780 affects the WordPress plugin WPCS – WordPress Currency Switcher (versions 1.1.6 and earlier). The vulnerability is a Cross-site Request Forgery (CSRF) that can allow an attacker, while a logged-in admin views a malicious page, to perform unintended actions and hijack administrator ...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Currency Switcher plugin 1.1.6 and prior...

WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery

Overview WordPress Plugin "WPCS - WordPress Currency Switcher" provided by realmag777 contains a cross-site request forgery vulnerability CWE-352. Mizuki Takagi of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported and coordinated with...