7 matches found
EUVD-2023-38073
Malicious code in bioql PyPI...
CVE-2023-33923
Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0...
CVE-2023-33923
Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0...
CVE-2023-33923
CVE-2023-33923 : Broken Access Control allowing authenticated users to activate arbitrary plugins in multiple HashThemes themes (Viral News, Viral, HashOne). Affected: Viral News up to 1.4.5; Viral up to 1.8.0; HashOne up to 1.3.0. Public records confirm a low- to moderate-severity issue (CVSS 4....
WordPress Plugin HashOne 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-12450 · Hasthemes · Hashthemes Viral +2
Name of the Vulnerable Software and Affected Versions: HashThemes Viral News versions 1.4.5 and earlier HashThemes Viral versions 1.8.0 and earlier HashThemes HashOne versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in HashThemes products. This...
WordPress HashOne Theme <= 1.3.0 is vulnerable to Broken Access Control
Software HashOne Type Theme Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33923 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID db48b6df310a Credits Dave Jong Patchstack Required privileg...