PT-2026-116038

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google one tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2025-13408

The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the foxtoollogingoogle function. This makes it...

PT-2025-50819

The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the foxtool login google function. This makes it...

PT-2024-22354

Name of the Vulnerable Software and Affected Versions Directus versions prior to 10.10.0 Description The authentication API has a redirect parameter that can be exploited as an open redirect vulnerability when a user tries to log in via the API URL. After a successful login via the Auth API GET...