204 matches found
CVE-2021-3135
An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php tdblockid parameter in a tdajaxblock API call...
WordPress 跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports the hosting of personal blog sites on PHP and MySQL servers. tagDiv Newspaper theme version 10.3.9.1 of WordPress has a cross-site scripting vulnerability that...
WordPress Newspaper premium theme <= 10.4 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by Truoc Phan in WordPress Newspaper premium theme versions = 10.4. Solution Update the WordPress Newspaper premium theme to the latest available version at least 11,...
Mexican Politician Removed Over Alleged Ties to Romanian ATM Skimmer Gang
The leader of Mexicos Green Party has been removed from office following allegations that he received money from a Romanian ATM skimmer gang that stole hundreds of millions of dollars from tourists visiting Mexicos top tourist destinations over the past five years. The scandal is the latest fallo...
Shaanxi Jinhua Network Technology Co., Ltd. digital newspaper management platform has file upload vulnerability
Ltd. abbreviation: Jinhua Technology is a new media technology company, mastering PDF intelligent anti-decomposition technology, focusing on the development of new media software for the digital newspaper industry, and now has a complete series of software products for the digital newspaper...
SQL Injection Vulnerability in Digital Newspaper Management Platform of Shaanxi Jinhua Network Technology Co.
Ltd. abbreviation: Jinhua Technology is focused on digital newspaper new media software development, currently has a complete domestic digital newspaper serialized software products, to provide customers with new media serialized solutions, products and services. SQL injection vulnerability exist...
newspaper.pudhari.co.in Cross Site Scripting vulnerability OBB-1450871
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Newspaper X theme <= 1.3.1 - Unauthenticated Function Injection vulnerability
Unauthenticated Function Injection vulnerability found by Jerome Bruandet NinTechNet in WordPress Newspaper X theme versions = 1.3.1. Solution Update the WordPress Newspaper X theme to the latest available version at least 1.3.2...
WordPress Newspaper premium theme <= 10.3.3 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Julio Potier Secupress in WordPress Newspaper premium theme versions = 10.3.3. Solution Update the WordPress Newspaper premium theme to the latest available version at least 10.3.4...
Newspaper < 10.3.4 - Authenticated Reflected Cross-Site Scripting
Description Julio Potier, from Secupress, found an authenticated admin+ reflected XSS in the Newspaper theme...
France’s largest newspaper exposed 8 TB of data with 7.4 billion records
By Sudais Asif Data breaches today still remain one of the most common security issues for companies judging by their frequency but... This is a post from HackRead.com Read the original post: France's largest newspaper exposed 8 TB of data with 7.4 billion records...
Tampa Bay Times hit with Ryuk ransomware attack
Florida newspaper The Tampa Bay Times suffered a Ryuk ransomware attack Thursday, making it the latest major victim of the notorious ransomware family that continues to rise in popularity. Curiously, the paper is at least the third Florida-based Ryuk victim in the past year. The attack, which The...
WordPress Exquisite Ultimate Newspaper theme cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Exquisite Ultimate Newspaper theme is a newspaper website theme plugin used in it. A cross-site scripting vulnerability exists in...
CVE-2015-9500
The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js...
Design/Logic Flaw
The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js...
CVE-2015-9500
The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js...
CVE-2016-10972
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...
CVE-2016-10972
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...
CVE-2016-10972
Newspaper Theme for WordPress versions 6.4–6.7.1 has a Privilege Escalation vulnerability caused by lack of options access control through td_ajax_update_panel. Unauthenticated attackers can escalate to administrator level, gaining full control over the WordPress site. Remediation: update to News...