11 matches found
EUVD-2024-50031
Malicious code in bioql PyPI...
CVE-2024-9578
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
CVE-2024-9578
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
CVE-2024-9578
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
CVE-2024-9578
CVE-2024-9578 : The Hide Links WordPress plugin is vulnerable in all versions up to and including 1.4.2, allowing unauthenticated attackers to execute arbitrary shortcodes by abusing do_shortcode via the comment_text filter. Impact is unauthenticated shortcode execution on the target site. Remedi...
CVE-2024-9578 Hide Links <= 1.4.2 - Unauthenticated Shortcode Execution
The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to doshortcode being hooked through the commenttext filter in all versions up to and including 1.4.2. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the...
WordPress plugin Hide Links 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-39697 · WordPress · Hide Links
Name of the Vulnerable Software and Affected Versions: The Hide Links plugin for WordPress versions up to and including 1.4.2 Description: The issue allows unauthorized shortcode execution due to do shortcode being hooked through the comment text filter. This enables unauthenticated attackers to...
WordPress Hide Links plugin <= 1.4.2 - Unauthenticated Shortcode Execution vulnerability
Unauthenticated Shortcode Execution vulnerability discovered by Francesco Carlucci in WordPress Plugin Hide Links versions = 1.4.2...
WordPress Hide Links Plugin <= 1.4.2 is vulnerable to Broken Authentication
Software Hide Links Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9578 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4b4a91ec2385 Credits Francesco...
ok.ru: Privilege Escalation удаляем все созданные ссылки с okl.lt
IDOR at okl.lt allowed to hide links in another user's dashboard. The short link itself remained functional. Уязвимость позволяла скрывать все созданные ссылки другими пользователями в их панеле, но ссылка продолжала работать IDOR at okl.lt allowed to hide links in another user's dashboard. The...