19 matches found
EUVD-2024-17331
Malicious code in bioql PyPI...
EUVD-2024-36687
Malicious code in bioql PyPI...
CVE-2024-1587
The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmaticfilterpostsloadtabcontent'. This makes it possible for unauthenticated attackers to view draft posts and post content...
CVE-2024-37468
Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1...
CVE-2024-37468
Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1...
CVE-2024-37468
CVE-2024-37468 is a Missing Authorization vulnerability in the Blazethemes Newsmatic WordPress theme (affected 1.3.1 and earlier). According to Red Hat and PT Security sources, the issue arises from incorrectly configured access control, enabling unauthorized access to restricted actions. CVSS v3...
CVE-2024-37468 WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1...
CVE-2024-37468 WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1...
WordPress plugin Newsmatic 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27578 · Blazethemes · Newsmatic
Name of the Vulnerable Software and Affected Versions: blazethemes Newsmatic versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.3.1 an...
WordPress Newsmatic theme <= 1.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Newsmatic versions = 1.3.1...
WordPress Newsmatic Theme <= 1.3.1 is vulnerable to Broken Access Control
Software Newsmatic Type Theme Vulnerable versions = 1.3.1 Fixed in 1.3.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37468 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5a6c88e4d8e5 Credits Dhabaleshwar Das Required privilege...
CVE-2024-1587
The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmaticfilterpostsloadtabcontent'. This makes it possible for unauthenticated attackers to view draft posts and post content...
CVE-2024-1587 Newsmatic <= 1.3.4 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmaticfilterpostsloadtabcontent'. This makes it possible for unauthenticated attackers to view draft posts and post content...
WordPress Theme Newsmatic 安全漏洞
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress Theme Newsmatic 1.3.0 and earlier versions, which stems...
PT-2024-18151 · WordPress · Newsmatic
Name of the Vulnerable Software and Affected Versions: Newsmatic theme for WordPress versions up to, and including, 1.3.0 Description: The issue allows unauthenticated attackers to view draft posts and post content due to Sensitive Information Exposure. This is possible via the newsmatic filter...
WordPress Newsmatic Theme <= 1.3.4 is vulnerable to Sensitive Data Exposure
Software Newsmatic Type Theme Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1587 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 55fdf2390c41 Credits Krzysztof Zając Required privileg...
Newsmatic < 1.3.5 - Unauthenticated Information Exposure via newsmatic_filter_posts_load_tab_content
Description The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmaticfilterpostsloadtabcontent'. This makes it possible for unauthenticated attackers to view draft posts and post content...
newsmatic.com.ar XSS vulnerability
Open Bug Bounty ID: OBB-560202 Description| Value ---|--- Affected Website:| newsmatic.com.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...