CVE-2020-36333

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

CVE-2020-36333

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

CVE-2020-36334

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database...

CVE-2020-36334

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database...

Authentication flaw

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

Cross site request forgery (csrf)

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database...

CVE-2020-36333

ThemeGrill Demo Importer prior to 1.6.2 is vulnerable via a reset_wizard_actions hook that allows unauthenticated users to wipe the entire WordPress database. The issue affects versions from 1.3.4 upward and 1.6.1 and below, enabling a full database reset to default state and automatic administra...

CVE-2020-36333

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

CVE-2020-36334

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database...

CVE-2020-36334

The CVE affects the WordPress plugin themegrill-demo-importer, with versions before 1.6.3. The vulnerability is cross-site request forgery (CSRF) in the plugin, demonstrated by the ability to wipe the database. Root cause details are not explicitly provided beyond the CSRF issue. Impact, as state...

PT-2021-12011 · Unknown · Themegrill-Demo-Importer

Name of the Vulnerable Software and Affected Versions: themegrill-demo-importer versions prior to 1.6.2 Description: The issue allows unauthorized access to wipe the database due to a lack of authentication requirement in the reset wizard actions hook. Recommendations: For themegrill-demo-importe...

WordPress 插件访问控制错误漏洞

WordPress Plugin is an open source application plugin for WordPress. An access control error vulnerability exists in the WordPress plugin themegrill-demo-importer prior to version 1.6.3, which stems from clearing a database without authentication...

WordPress 插件跨站请求伪造漏洞

WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin themegrill-demo-importer version prior to 1.6.3 suffers from a cross-site request forgery vulnerability, as demonstrated by clearing the database...

Podcast Importer SecondLine < 1.1.5 - Server-Side Request Forgery (SSRF)

The plugin was vulnerable to Server-side request forgery SSRF...

openSUSE Security Update : gimp (openSUSE-2020-2357)

This update for gimp fixes the following issues : Security issue fixed : - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed : - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the...

WordPress ThemeGrill Demo Importer plugin <= 1.6.2 - Bypass and Database Wipe vulnerability

Bypass and Database Wipe vulnerability discovered by Dave Patchstack in WordPress ThemeGrill Demo Importer plugin versions = 1.6.2. Solution Update the WordPress ThemeGrill Demo Importer plugin to the latest available version at least 1.6.3...

CVE-2020-26121

An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should not be able to create it. This occurs because of a mishandled distinction between an upload...

VulnCheck KEV: CVE-2015-2067

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-38683)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.0, which stems from...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...