CVE-2024-37479: Improper Control of Filename for Include/Require Statement in PHP Program

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progresstype" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1...

CVE-2024-5349: Improper Limitation of a Pathname to a Restricted Directory

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'mapstyle' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

WordPress LA-Studio Element Kit for Elementor Plugin <= 1.3.8.1 is vulnerable to Local File Inclusion

Software LA-Studio Element Kit for Elementor Type Plugin Vulnerable versions = 1.3.8.1 Fixed in 1.3.9 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-37479 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID ddb890f0e5f3 Credits João Pedro S Alcânta...

radelier-de-la-loue.asso-web.com Cross Site Scripting vulnerability OBB-3938608

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-2958 Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in repelis-pelisplus-ver-la-ballena-2022-pelicula-completa-en-espanol (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2192 Malicious code in down_load_ebook_la_scienza_dei_capelli_by_elena_accorsi_buttini_l2q0j (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2154 Malicious code in down_load_ebook_causa_de_la_muerte_by_richard_shepherd_2a7ov (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2127 Malicious code in down_load_ebook_al_suelo_enredos_con_la_ley_4_by_ruth_m_lerga_smplq (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cuevana-3-ver-john-wick-4-2023-descargar-la-pelicula (npm)

--- -= Per source details. Do not edit below this line.=-...

Ransomware Attacks Are Getting Worse

Plus: US lawmakers have nothing to say about an Israeli influence campaign aimed at US voters, a former LA Dodgers owner wants to fix the internet, and more...

CVE-2024-35725

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...

CVE-2024-35725

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...

CVE-2024-35725 WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...

CVE-2024-35725

CVE-2024-35725: Missing Authorization vulnerability in LA-Studio Element Kit for Elementor affecting LA-Studio Element Kit for Elementor versions up to 1.3.6. Connected sources confirm a broken access control issue with high impact (per NVD CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The document...

PT-2024-26676

Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions 1.3.6 and earlier Description The issue is related to a Missing Authorization vulnerability in LA-Studio Element Kit for Elementor. Recommendations For LA-Studio Element Kit for Elementor versions...

CVE-2024-35725: Missing Authorization

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6...

WordPress plugin LA-Studio Element Kit for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

la-maison-blanche.franchecomtehotels.com Cross Site Scripting vulnerability OBB-3933071

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress LA-Studio Element Kit for Elementor Plugin <= 1.3.6 is vulnerable to Broken Access Control

Software LA-Studio Element Kit for Elementor Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35725 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a7f224f9edc9 Credits...