CVE-2023-47558

CVE-2023-47558 concerns the WordPress plugin Who Hit The Page – Hit Counter (v

WordPress Plugin Who Hit The Page SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Who Hit The Page suffers from a SQL...

PT-2023-30507 · Unknown · Mahlamusa Who Hit The Page – Hit Counter

Name of the Vulnerable Software and Affected Versions: Mahlamusa Who Hit The Page – Hit Counter versions 1.4.14.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injectio...

hit-tuner.net Cross Site Scripting vulnerability OBB-3805318

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection

Software Who Hit The Page – Hit Counter Type Plugin Vulnerable versions = 1.4.14.3 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-47558 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 7876cc0db575 Credits thiennv Required privilege...

Analysis: A Ransomware Attack on a PostgreSQL Database

In 2017, we reported on a database ransomware campaign targeting MySQL and MongoDB. Since then, we’ve observed similar attack tactics on a PostgreSQL database in Imperva Threat Research lab. In general, the attack flow contained: A brute force attack on the database for known users and weak...

CVE-2023-46087

Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

CVE-2023-46087

Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

CVE-2023-46087 WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

CVE-2023-46087

CVE-2023-46087 describes a CSRF vulnerability in the WordPress plugin “Who Hit The Page – Hit Counter” by Mahlamusa, affecting versions 1.4.14.3 or apply vendor-provided CSRF mitigations. The CVE entry does not provide exploit specifics beyond the CSRF description, and the vulnerability impact i...

PT-2023-29836 · WordPress · Mahlamusa Who Hit The Page – Hit Counter

Name of the Vulnerable Software and Affected Versions: Mahlamusa Who Hit The Page – Hit Counter plugin versions = 1.4.14.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application tha...

WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Who Hit The Page – Hit Counter Type Plugin Vulnerable versions = 1.4.14.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46087 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3e58c9266549 Credits...

hit-wypozyczalnia.pl Cross Site Scripting vulnerability OBB-3722015

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25466

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

CVE-2023-25466 WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin = 1.4.14.3 versions...

CVE-2023-25466

CVE-2023-25466 applies to the WordPress plugin Mahlamusa Who Hit The Page – Hit Counter, affected versions ≤ 1.4.14.3. Reported as unauthenticated, reflected Cross-Site Scripting (XSS). Remediation guidance from PT-2023-20084 indicates upgrading to a version higher than 1.4.14.3 (or disabling the...

WordPress Post Hit Counter Plugin <= 1.3.2 is vulnerable to Broken Access Control

Software Post Hit Counter Type Plugin Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36518 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5852c9f17a30 Credits Cat Required privilege...

WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)

Software Who Hit The Page – Hit Counter Type Plugin Vulnerable versions = 1.4.14.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25466 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 01e8a810fef2 Credits...

GHSA-2Q5C-QW9C-FMVQ Argo CD authenticated but unauthorized users may enumerate Application names via the API

Impact All versions of Argo CD starting with v0.5.0 are vulnerable to an information disclosure bug allowing unauthorized users to enumerate application names by inspecting API error messages. An attacker could use the discovered application names as the starting point of another attack. For...