Lucene search
+L

661 matches found

OSV
OSV
added 2024/07/20 7:15 a.m.8 views

CVE-2024-6489

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getgoogleapikey function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level access a...

5.3CVSS5.8AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/20 7:15 a.m.41 views

CVE-2024-6489

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getgoogleapikey function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level access a...

5.3CVSS0.00298EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/20 6:43 a.m.50 views

CVE-2024-6489 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getgoogleapikey function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level access a...

5.3CVSS0.00298EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/20 6:43 a.m.13 views

CVE-2024-6489 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getgoogleapikey function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level access a...

5.3CVSS6.4AI score0.00298EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/20 6:43 a.m.48 views

CVE-2024-6491 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimpapikeymanage function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level...

4.3CVSS0.00378EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/07/20 6:43 a.m.14 views

CVE-2024-6491 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimpapikeymanage function in all versions up to, and including, 2.0.10. This makes it possible for authenticated attackers, with Contributor-level...

4.3CVSS6.4AI score0.00378EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/20 12:0 a.m.6 views

PT-2024-37663 · WordPress · Getwid

Name of the Vulnerable Software and Affected Versions: Getwid – Gutenberg Blocks plugin for WordPress versions up to, and including, 2.0.10 Description: The issue allows unauthorized modification of data due to a missing capability check on the get google api key function. This makes it possible...

5.3CVSS6.5AI score0.00298EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/07/20 12:0 a.m.9 views

PT-2024-37665 · WordPress · Getwid

Name of the Vulnerable Software and Affected Versions: Getwid – Gutenberg Blocks plugin for WordPress versions up to, and including, 2.0.10 Description: The issue allows unauthorized modification of data due to a missing capability check on the mailchimp api key manage function. This makes it...

4.3CVSS6.5AI score0.00378EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/30 5:5 a.m.4 views

Malicious code in auth0-mailchimp-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2f2ab30602da138b3668767294a045502dabcc11b0db0aa9c89dd18de4ab0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/06/30 5:5 a.m.18 views

MAL-2024-7087 Malicious code in auth0-mailchimp-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2f2ab30602da138b3668767294a045502dabcc11b0db0aa9c89dd18de4ab0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
Krebs on Security
Krebs on Security
added 2024/06/15 11:40 p.m.40 views

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today...

7.8AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2024/06/12 12:0 a.m.15 views

Easy Forms for Mailchimp <= 6.9.0 - Missing Authorization

Description The Easy Forms for Mailchimp plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.9.0. This makes it possible for unauthenticated attackers to perform an unauthorized action...

7.3CVSS6.7AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/11 4:15 p.m.7 views

CVE-2023-51682

Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9...

5.3CVSS5.8AI score0.0042EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/10 8:15 a.m.5 views

CVE-2024-35742

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

7.3CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2024/06/10 8:15 a.m.30 views

CVE-2024-35742

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

7.3CVSS0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/10 7:40 a.m.35 views

CVE-2024-35742 WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

5.3CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/10 7:40 a.m.65 views

CVE-2024-35742

CVE-2024-35742 is listed in the initial document as a Missing Authorization vulnerability in Easy Forms for Mailchimp affecting versions up to 6.9.0. The connected documents do not provide detailed technical specifics (no root cause, impact, affected sub-components, or remediation steps) beyond t...

7.3CVSS6.4AI score0.00316EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/10 7:40 a.m.23 views

CVE-2024-35742 WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

5.3CVSS7.2AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.5 views

WordPress plugin Easy Forms for Mailchimp security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin... A security vulnerability...

7.3CVSS6.7AI score0.00316EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/06/06 2:2 p.m.7 views

WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Easy Forms for Mailchimp versions = 6.9.0...

7.3CVSS7AI score0.00316EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder