35 matches found
CVE-2024-34568
Exploit Title: LetterPress = 1.2.1 - Cookie Stealing Vulnerability Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...
LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability
Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...
CVE-2024-34568
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1...
EUVD-2024-34871
Malicious code in bioql PyPI...
EUVD-2023-31191
Malicious code in bioql PyPI...
CVE-2023-27415
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Themeqx LetterPress plugin = 1.1.2 versions...
WordPress LetterPress plugin <= 1.2.2 - Subscriber Deletion via CSRF vulnerability
Subscriber Deletion via CSRF vulnerability discovered by SANU P.L in WordPress Plugin LetterPress versions = 1.2.2...
WordPress LetterPress Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software LetterPress Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3590 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6967a7d78047 Credits SANU P.L Required privileg...
CVE-2024-3590
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...
WordPress plugin LetterPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-3590: Cross-Site Request Forgery (CSRF)
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...
CVE-2024-3590 LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...
CVE-2024-3590 LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...
CVE-2024-3590
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers...
PT-2024-26774 · WordPress · The Letterpress
Name of the Vulnerable Software and Affected Versions: The LetterPress WordPress plugin versions 1.2.2 and earlier Description: The issue is related to the lack of CSRF checks in some areas, allowing attackers to perform unwanted actions on logged-in users via CSRF attacks, such as deleting...
CVE-2024-34568
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1...
CVE-2024-34568 WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1...
CVE-2024-34568
CVE-2024-34568 affects the WordPress LetterPress Newsletter plugin, versions <= 1.2.1. Root cause: Improper neutralization of input during web page generation, leading to Stored XSS. Impact is documented as Cross-Site Scripting with low CVSS v3.1 base score (5.9) and low overall severity; expl...
CVE-2024-34568 WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1...
WordPress plugin LetterPress 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin LetterPres...