CVE-2024-30507 WordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Molongui.This issue affects Molongui: from n/a through 4.7.7...

CVE-2024-30507

Technical details for CVE-2024-30507 are not provided in the Connected Documents. The initial description lists an authorization bypass in Molongui, but no vendor/versions/patch information are present here. Monitor for official advisories.

PT-2024-23434 · Molongui · Molongui

Name of the Vulnerable Software and Affected Versions: Molongui versions through 4.7.7 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects Molongui, allowing for potential unauthorized access. Recommendations: For...

WordPress Plugin Molongui 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Molongui Plugin <= 4.7.7 is vulnerable to Insecure Direct Object References (IDOR)

Software Molongui Type Plugin Vulnerable versions = 4.7.7 Fixed in 4.7.8 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-30507 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID c7f745bc9de4 Credits CatFather Required...

CVE-2024-29764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7...

CVE-2024-29764

CVE-2024-29764 is a Stored XSS vulnerability in Molongui Authorship (WordPress plugin). Affected version range: Molongui: n/a through 4.7.7. Root cause: Improper neutralization of input during web page generation. Impact: potential data integrity and client-side script execution, with CVSS v3.1 m...

CVE-2024-29764 WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7...

CVE-2024-29764 WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7...

PT-2024-23005 · Molongui · Molongui

Name of the Vulnerable Software and Affected Versions: Molongui versions prior to 4.7.8 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

WordPress Molongui Plugin <= 4.7.7 is vulnerable to Cross Site Scripting (XSS)

Software Molongui Type Plugin Vulnerable versions = 4.7.7 Fixed in 4.7.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-29764 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e451b3b23ad2 Credits CatFather Required privilege Auth...

CVE-2023-7014

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data includi...

CVE-2023-7014

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data includi...

Information disclosure

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data includi...

CVE-2023-7014

CVE-2023-7014 affects the WordPress plugin Molongui Authorship (Author Box, Guest Author, Co-Authors). The root cause is information exposure via the ma_debu parameter, enabling unauthenticated attackers to retrieve sensitive data (post author emails and names) for all versions up to and includin...

CVE-2023-7014 Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug

The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data includi...

PT-2024-15177 · WordPress · The Author Box

Name of the Vulnerable Software and Affected Versions: The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress versions up to, and including, 4.7.4 Description: The issue allows unauthenticated attackers to extract sensitive data, including post author emails an...

Author Box, Guest Author and Co-Authors for Your Posts – Molongui < 4.7.5 - Information Exposure via ma_debug

Description The plugin is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'madebu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including post author emails and names if applicable...

WordPress Molongui Plugin <= 4.7.4 is vulnerable to Sensitive Data Exposure

Software Molongui Type Plugin Vulnerable versions = 4.7.4 Fixed in 4.7.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7014 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7b1a6ad036e9 Credits Krzysztof Zając Required privileg...

Molongui < 4.7.4 - Missing Authorization

Description The Molongui plugin for WordPress is vulnerable to unauthorized modification and access of data due to missing capability checks on the authorshipexportoptions and authorshipsaveoptions functions hooked via AJAX in versions up to, and including, 4.7.3. This makes it possible for...