How to help maintain security compliance

This is the last post in our eight-blog series on deploying Intelligent Security scenarios. To read the previous entries, check out the Deployment series page. Your employees need to access, generate, and share organizational information ranging from extremely confidential to informal; you must...

User Confidence in Smartphone Security Abysmal

Smartphone owners are growing worried about data privacy, and will delete apps they don’t trust. And only a quarter feel they are in control of their personal data. Research carried out by the Mobile Ecosystem Forum MEF, a trade body, found that Europeans are among the most wary cellphone users,...

madreshoy.com XSS vulnerability

Open Bug Bounty ID: OBB-703149 Description| Value ---|--- Affected Website:| madreshoy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Instagram Accidentally Exposed Some Users' Passwords In Plaintext

Instagram has recently patched a security issue in its website that might have accidentally exposed some of its users' passwords in plain text. The company recently started notifying affected users of a security bug that resides in a newly offered feature called "Download Your Data" that allows...

Critical WordPress Plugin Flaw Grants Admin Access to Any Registered Site User

Another day, another critical WordPress plugin vulnerability. The popular AMP for WP plugin, which helps WordPress sites load faster on mobile browsers, has a privilege-escalation flaw that allows WordPress site users of any level to make administrative changes to a website. The plugin, which has...

6 security concerns to consider when automating your business

Automation is an increasingly-enticing option for businesses, especially when those in operations are in a perpetual cycle of "too much to do and not enough time to do it." When considering an automation strategy, business representatives must be aware of any security risks involved. Here are six...

WordPress Van Ons WP GDPR Compliance Plugin Elevation of Privilege Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Van Ons WP GDPR Compliance plugin is a data collection plugin used in ... An elevation of privilege vulnerability...

WordPress Plugin 'WP GDPR Compliance' < 1.4.3 Privilege Escalation

The WordPress application running on the remote host has a version of the 'WP GDPR Compliance' plugin that is prior to 1.4.3 and, thus, is affected by a user-input validation error that can allow privilege escalation attacks. Such attacks allow, among other actions, creation of new...

WordPress GDPR Compliance plugin hacked to spread backdoor

By Waqas Update your GDPR Compliance plugin right now. Security researchers have identified a critical vulnerability in the popular WP GDPR Compliance plugin assisting over 100,000 website owners around the world to comply with European privacy regulations known as GDPR that was announced by...

WordPress WP GDPR Compliance plugin <= 1.4.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability found in WordPress WP GDPR Compliance plugin versions = 1.4.2. Solution Update the WordPress WP GDPR Compliance plugin to the latest available version at least 1.4.3...

WordPress WP GDPR Compliance Plugin < 1.4.3 Privilege Escalation Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.141674";...

CVE-2018-19207

The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...

CVE-2018-19207

The CVE-2018-19207 entry concerns the WordPress WP GDPR Compliance plugin (before 1.4.3). The vulnerability stems from improper handling of input to WordPress database operations (notably $wpdb-&gt;prepare()), enabling remote attackers to execute arbitrary code. Multiple sources (NVD, Nuclei temp...

Lawsuits Aim Billions in Fines at Equifax and Ad-Targeting Companies

Equifax, Experian and Oracle are among a slate of companies whose business is consumer information, that could soon face billions of dollars in fines for improper data handling. Privacy International has filed complaints against seven corporations, consisting of data brokers Acxiom and Oracle,...

WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option

The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...

WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option

The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...

GDPR’s First 150 Days Impact on the U.S.

Apple CEO Tim Cook publicly entered the data privacy fray earlier this month, praising the European Union’s General Data Protection Regulation GDPR. At the International Conference of Data Protection and Privacy Commissioners Conference ICDPPC, Cook advocated for GDPR rules to have a far-reaching...

UK Slaps Facebook with $645K Fine Over Cambridge Analytica Scandal

The UK has fined Facebook $645,000 over Cambridge Analytica’s data harvesting practices, which exploited the data of 87 million users of the social network. That represents a gnat bite for the tech giant, which generated $5.1 billion in net profit in the second quarter of the year. However, the...

Facebook Fined £500,000 for Cambridge Analytica Data Scandal

Facebook has finally been slapped with its first fine of £500,000 for allowing political consultancy firm Cambridge Analytica to improperly gather and misuse data of 87 million users. The fine has been imposed by the UK's Information Commissioner's Office ICO and was calculated using the UK's old...

WordPress GDPR Compliance Plugin Privilege Escalation (CVE-2018-19207)

A privilege escalation vulnerability exists in WordPress GDPR Compliance Plugin. The vulnerability is due to a missing authorization at the "userscanregister" action. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...