WordPress plugin Tumult Hype Animations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Tumult Hype Animations plugin <= 1.9.14 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Tumult Hype Animations versions = 1.9.14...

PT-2024-16357 · Tumult · Tumult Hype Animations

Name of the Vulnerable Software and Affected Versions: Tumult Hype Animations plugin for WordPress versions up to, and including, 1.9.14 Description: The issue is related to unauthorized access of data due to a missing capability check on the hypeanimations getcontent function. This allows...

WordPress Tumult Hype Animations Plugin <= 1.9.14 is vulnerable to Broken Access Control

Software Tumult Hype Animations Type Plugin Vulnerable versions = 1.9.14 Fixed in 1.9.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10543 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1d6ac9386f94 Credits Tieu Pham Trong Nhan...

CTEM in the Spotlight: How Gartner's New Categories Help to Manage Exposures

Want to know what's the latest and greatest in SecOps for 2024? Gartner's recently released Hype Cycle for Security Operations report takes important steps to organize and mature the domain of Continuous Threat Exposure Management, aka CTEM. Three categories within this domain are included in thi...

The AI Hangover is Here – The End of the Beginning

After a good year of sustained exuberance, the hangover is finally here. It's a gentle one for now, as the market corrects the share price of the major players like Nvidia, Microsoft, and Google, while other players reassess the market and adjust priorities. Gartner calls it the trough of...

CVE-2024-30460

Cross-Site Request Forgery CSRF vulnerability in Tumult Inc Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.11...

CVE-2024-30460 WordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tumult Inc Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.11...

CVE-2024-30460

CVE-2024-30460 concerns a Cross-Site Request Forgery in the WordPress plugin Tumult Hype Animations (versions

CVE-2024-30460 WordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tumult Inc Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.11...

PT-2024-23390 · Tumult · Tumult Hype Animations

Name of the Vulnerable Software and Affected Versions: Tumult Hype Animations versions 1.9.11 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicatio...

WordPress Plugin Tumult Hype Animations 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2024-2890

Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12...

CVE-2024-2890 WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12...

CVE-2024-2890 WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12...

CVE-2024-2890

CVE-2024-2890 affects the WordPress plugin Tumult Hype Animations up to version 1.9.12. The issue is an Unrestricted Upload of File with Dangerous Type due to insufficient validation in hypeanimations_panel_upload(), allowing authenticated attackers with author-level access to upload arbitrary fi...

WordPress Plugin Tumult Hype Animations 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Tumult Hype Animations Plugin <= 1.9.11 is vulnerable to Cross Site Scripting (XSS)

Software Tumult Hype Animations Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-30461 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 98402ce486d0 Credits Majed...

WordPress Tumult Hype Animations Plugin <= 1.9.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software Tumult Hype Animations Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-30460 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c704327afb62 Credits Majed Refaea...

PT-2024-22636 · Tumult · Tumult Hype Animations

Name of the Vulnerable Software and Affected Versions: Tumult Hype Animations versions 1.9.12 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects Tumult Hype Animations. Recommendations: For versions 1.9.12 and earlier, update to a...