EUVD-2020-30790

Malware in sbrugna...

CVE-2020-36842

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvividuploadimportfiles and wpvividuploadfiles AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently...

CVE-2020-36838

The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wpajaxupdateoptions function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger accou...

CVE-2020-36835

The CVE-2020-36835 entry concerns the WordPress WPvivid Migration, Backup, Staging plugin. Affected component: wp_ajax_wpvivid_add_remote AJAX action. Root cause: missing capability checks allow low‑level authenticated attackers to exfiltrate the WordPress site database by sending backups to a re...