8 matches found
CVE-2024-10508
CVE-2024-10508 此工具扫描WordPress站点中RegistrationMagic 插件的漏洞CVE-2024-10508 。 它会检查特定版本（6.0.2.6）是否存在，如果发现则将该站点标记为易受攻击。 结果保存在文件vuln.txt中，供进一步分析。 功能： 扫描WordPress网站中“RegistrationMagic”插件的漏洞，特别是CVE-2024-10508。 检查插件是否存在易受攻击的版本“6.0.2.6”，并将这些网站标记为易受攻击。 将易受攻击站点的URL保存到结果文件vuln.txt中，以便进一步审查和报告。 请我喝杯咖啡： 比特币 $:...
CVE-2024-10508
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updati...
WordPress RegistrationMagic Plugin <= 6.0.2.6 is vulnerable to Privilege Escalation
Software RegistrationMagic Type Plugin Vulnerable versions = 6.0.2.6 Fixed in 6.0.2.7 OWASP Top 10 A3: Injection Classification Privilege Escalation CVE CVE-2024-10508 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID fa83ac6f8527 Credits shaman0x01 Required privilege...
Exploit for Improper Handling of Missing Values in Metagauss Registrationmagic
CVE-2024-10508 This tool scans WordPress sites for vulnerabil...
CVE-2024-10508
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updati...
CVE-2024-10508
creationtimestamp| type| source ---|---|--- 2024-11-09 07:36:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113451845282995928 2024-11-09 09:56:32+00:00| seen| https://t.me/cvedetector/10286 2024-11-21 04:36:37+00:00| seen| https://t.me/GithubRedTeam/9110 2024-11-22 10:05:09+00:00|...
CVE-2024-10508 RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updati...
CVE-2024-10508 RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updati...