CVE-2024-1756

CVE-2024-1756 affects the WooCommerce Customers Manager WordPress plugin, prior to version 29.8, due to missing authorization and CSRF protections in an AJAX action. This allows any authenticated user (e.g., a subscriber) to call the action and exfiltrate customer data including email addresses, ...

Identity theft protection firm LifeLock may have exposed user email addresses

By Waqas LifeLock, an Arizona-based identity theft protection firm may have exposed email addresses of millions of its customers - Simply put: A firm vowing to protect online identity of its customers may have exposed their identity to malicious hackers and cybercriminals. It happened due to a...