PT-2024-15864 · WordPress · Aa Cash Calculator

Name of the Vulnerable Software and Affected Versions: AA Cash Calculator plugin for WordPress version 1.0 and earlier Description: The issue is related to Reflected Cross-Site Scripting via the invoice parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-0848: Improper Neutralization of Input During Web Page Generation

The AA Cash Calculator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘invoice’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

WordPress AA Cash Calculator plugin <= 1.0 - Reflected Cross-Site Scripting via invoice vulnerability

Reflected Cross-Site Scripting via invoice vulnerability discovered by Nathaniel Oh 0x4n3 in WordPress Plugin AA Cash Calculator versions = 1.0...

AA Cash Calculator <= 1.0 - Reflected Cross-Site Scripting via invoice

Description The AA Cash Calculator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘invoice’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.8.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 4.8.1...

WordPress Print Invoice & Delivery Notes for WooCommerce Plugin <= 4.8.1 is vulnerable to Broken Access Control

Software Print Invoice & Delivery Notes for WooCommerce Type Plugin Vulnerable versions = 4.8.1 Fixed in 4.9.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4233 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 78b1e6c0b7b8 Credits...

WordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerability

Sensitive Data Exposure via Invoices vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin VikRentCar versions = 1.3.2...

CVE-2024-32518

Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0...

CVE-2024-32518 WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0...

CVE-2024-32518 WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0...

WordPress Plugin PeproDev Ultimate Invoice 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32518: Missing Authorization

Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0...

WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin PeproDev Ultimate Invoice versions = 2.0.0...

PT-2024-24636

Name of the Vulnerable Software and Affected Versions PeproDev Ultimate Invoice versions n/a through 2.0.0 Description The issue is related to a Missing Authorization vulnerability in PeproDev Ultimate Invoice. Recommendations For PeproDev Ultimate Invoice versions n/a through 2.0.0, at the momen...

WordPress PeproDev Ultimate Invoice Plugin <= 2.0.0 is vulnerable to Broken Access Control

Software PeproDev Ultimate Invoice Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.0.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32518 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID f03a4beba6e1 Credits Abdi Pranata...

Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing

Cybersecurity researchers have discovered an intricate multi-stage attack that leverages invoice-themed phishing decoys to deliver a wide range of malware such as Venom RAT, Remcos RAT, XWorm, NanoCore RAT, and a stealer that targets crypto wallets. The email messages come with Scalable Vector...

CVE-2024-25933

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7...

CVE-2024-25933 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7...

CVE-2024-25933 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7...

CVE-2024-25933

CVE-2024-25933 concerns PeproDev Ultimate Invoice plugin for WordPress. Public details in connected sources indicate unauthenticated exposure of sensitive information via the init_plugin path, affecting PeproDev Ultimate Invoice versions up to 1.9.7. The NVD metrics assign a high base score (7.5)...