CVE-2019-20360

A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information PII including names, addresses, IP addresses, and email addresses. Once an API key has been set to any meta key value from the...

Authentication flaw

A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information PII including names, addresses, IP addresses, and email addresses. Once an API key has been set to any meta key value from the...

CVE-2019-20360

CVE-2019-20360 affects the WordPress GiveWP plugin (versions prior to 2.5.5). It describes an authentication bypass where unauthenticated users can access PII (names, addresses, IPs, emails) by manipulating an API key to match a wp_usermeta key and setting the token to the corresponding MD5 hash ...

CVE-2019-20360

A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information PII including names, addresses, IP addresses, and email addresses. Once an API key has been set to any meta key value from the...

d-dar.ru GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1036950 Security Researcher Sidd Helped patch 16 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting d-dar.ru website and its users. Following coordinated and...

escrim.org GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1033374 Security Researcher whitehatewizard Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting escrim.org website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the...

result.fipv.net GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1033373 Security Researcher whitehatewizard Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting result.fipv.net website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...

bangaloreallergycentre.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031698 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting bangaloreallergycentre.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines ...

cimambiente.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031262 Security Researcher whitehatewizard Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cimambiente.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...

files.viviennerogers.info GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031204 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting files.viviennerogers.info website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...

mediacapital.group GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031135 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting mediacapital.group website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the I...

vulcan-steel.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031121 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting vulcan-steel.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

losangelesdreamrentals.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031085 Security Researcher Hacker Helped patch 4 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting losangelesdreamrentals.com website and its users. Followin...

cretanmedicare.gr GDPR PII Exposure vulnerability

Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cretanmedicare.gr website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bount...

comxepto.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1025398 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

projetos.prime.cv GDPR PII Exposure vulnerability

Security Researcher karthi Helped patch 5 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting projetos.prime.cv website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Boun...

photoenvision.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021834 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting photoenvision.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines...

macs.hw.ac.uk GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021824 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting macs.hw.ac.uk website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...

monitor.somafm.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1020579 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

U.S. Government, Military Personnel Data Leaked By Autoclerk

A leaky database owned by reservations management system Autoclerk has exposed the personal data and travel information for thousands of users – including U.S. government and military personnel. Autoclerk, which was acquired by the Best Western Hotel and Resorts Group in August, provides...