CVE-2024-35168

Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...

CVE-2024-35168 WordPress WP Discourse plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...

CVE-2024-35168

CVE-2024-35168 is a Missing Authorization vulnerability in the WordPress plugin WP Discourse, affecting WP Discourse versions from unspecified (n/a) up to 2.5.1. The public data provide a CVSS v3.1 base score of 4.3 (Network attack, Low attack complexity, Low privileges required, No user interact...

CVE-2024-35168 WordPress WP Discourse plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...

PT-2024-26349

Name of the Vulnerable Software and Affected Versions WP Discourse versions 2.5.1 and earlier Description A Missing Authorization issue has been identified. This issue affects the Discourse WP Discourse plugin. Recommendations For WP Discourse versions 2.5.1 and earlier, update to a version later...

WordPress plugin WP Discourse security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-35168: Missing Authorization

Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1...

WP Discourse < 2.5.2 - Missing Authorization

Description The WP Discourse plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.5.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorize...

WordPress WP Discourse plugin <= 2.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WP Discourse versions = 2.5.1...

Discourse Information Disclosure Vulnerability (CNVD-2024-20430)

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An information disclosure vulnerability exists in Discourse-reactions, which stems from the application's inadequate protection of sensitive information and can be...

CVE-2024-31219

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via whispersallowedgroups and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the /u/:username/activity/reaction...

CVE-2024-31219 Discourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via whispersallowedgroups and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the /u/:username/activity/reaction...

CVE-2024-31219 Discourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via whispersallowedgroups and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the /u/:username/activity/reaction...

CVE-2024-31219

CVE-2024-31219 affects the Discourse-reactions plugin. When whispers are enabled via whispers_allowed_groups and users react on whispers in public topics, the contents of the whisper and the reaction data are exposed on the /u/:username/activity/reactions endpoint. The vulnerability is described ...

CVE-2024-31219 Discourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via whispersallowedgroups and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the /u/:username/activity/reaction...

CVE-2024-31219

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via "whispersallowedgroups" and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the...

Malicious code in discourse-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2024bbd933a9c01975b023ff2dd84531dde77e3956d38d5b582374451fa995d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1257 Malicious code in discourse-markdown-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15650dd9d3ef6040ce65c2e6b3207c96240af179ecbc7061ed5064205df4673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discourse-markdown-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15650dd9d3ef6040ce65c2e6b3207c96240af179ecbc7061ed5064205df4673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1256 Malicious code in discourse-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2024bbd933a9c01975b023ff2dd84531dde77e3956d38d5b582374451fa995d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...