EUVD-2020-24194

Malware in sbrugna...

EUVD-2024-35530

Malicious code in bioql PyPI...

EUVD-2022-52080

Malicious code in bioql PyPI...

CVE-2024-35772

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24...

CVE-2022-4784

The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2020-36753

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

CVE-2024-35772

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24...

CVE-2024-35772

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24...

CVE-2024-35772

Technical details about CVE-2024-35772 (Hueman CSRF) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-35772 WordPress Hueman theme <= 3.7.24 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24...

CVE-2024-35772 WordPress Hueman theme <= 3.7.24 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Hueman.This issue affects Hueman: from n/a through 3.7.24...

WordPress plugin Hueman Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress Hueman theme <= 3.7.24 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Hueman versions = 3.7.24...

WordPress Hueman Theme <= 3.7.24 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hueman Type Theme Vulnerable versions = 3.7.24 Fixed in 3.7.25 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-35772 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2b3848018aa3 Credits Dhabaleshwar Das Required...

CVE-2020-36753

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

Cross site request forgery (csrf)

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

CVE-2020-36753 Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

CVE-2020-36753 Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

CVE-2020-36753

The CVE-2020-36753 entry concerns the WordPress theme Hueman. All provided sources describe a Cross-Site Request Forgery vulnerability in Hueman versions up to 3.6.3 caused by missing or incorrect nonce validation in the save_meta_box() function, allowing unauthenticated attackers to save metabox...

WordPress theme Hueman Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress theme Hueman, which stems from a missing or incorrect random...