WordPress Peter’s Custom Anti-Spam plugin <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function vulnerability

Cross-Site Request Forgery via casregisterpost Function vulnerability discovered by SOPROBRO in WordPress Plugin Peter’s Custom Anti-Spam versions = 3.2.3...

CVE-2024-43812

Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system...

CVE-2024-43698

Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system...

CVE-2024-43812

The CVE-2024-43812 issue affects Kieback&Peter DDC4000 series controllers (e.g., DDC4002, DDC4100, DDC4200, DDC4400, and their “e” variants) and is caused by insufficiently protected credentials that may allow an unauthenticated attacker with access to /etc/passwd to read password hashes. The vul...

CVE-2024-41717

CVE-2024-41717 affects Kieback&Peter DDC4000 series controllers (DDC4002, 4100, 4200, 4200-L, 4400 and related E-series) with a path traversal (CWE-22) vulnerability that allows an unauthenticated attacker to read files on the system. CVSSv3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H);...

CVE-2023-45759

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Peter Keung Peter’s Custom Anti-Spam plugin = 3.2.2 versions...

WordPress Plugin Peter's Custom Anti-Spam Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-45759

CVE-2023-45759 is an unauthenticated reflected XSS in Peter’s Custom Anti-Spam plugin for WordPress, affecting versions

PT-2023-29675 · Unknown · Peter'S Custom Anti-Spam

Name of the Vulnerable Software and Affected Versions: Peter Keung Peter’s Custom Anti-Spam plugin versions = 3.2.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devic...

WordPress Peter's Login Redirect Plugin < 3.0.0.5 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Peter's Login Redirect Plugin < 2.9.2 CSRF Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they are a legitimate user or an automaton. The challenge data is poorly obfuscate...

Vulnerabilities in Peter’s Random Anti-Spam Image

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в капче Peter’s Random Anti-Spam Image. Это капча плагин для WordPress. Данная капча уязвима для half-automated method. Insufficient Anti-automation: Эксплоит:...