28 matches found
CVE-2024-25915 WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...
CVE-2024-25915
CVE-2024-25915 describes a Server-Side Request Forgery (SSRF) in the WordPress plugin Pexels: Free Stock Photos (versions
CVE-2024-25915 WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: Free Stock Photos: from n/a through 1.2.2...
WordPress Plugin Pexels Free Stock Photos Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress Pexels: Free Stock Photos Plugin <= 1.2.2 is vulnerable to Server Side Request Forgery (SSRF)
Software Pexels: Free Stock Photos Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2024-25915 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 1ce792c12670 Credits Majed Refaea...
Malicious Package
Overview pexels-figma is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
MAL-2022-6148 Malicious code in sketch-pexels (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60d8fa01b1b525ddb0376773fc65eb3e5cdf06f8499d469a7eaba8739b5e3b40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sketch-pexels (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60d8fa01b1b525ddb0376773fc65eb3e5cdf06f8499d469a7eaba8739b5e3b40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...