PT-2023-30213 · WordPress · Bright Plugins Pre-Orders For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bright Plugins Pre-Orders for WooCommerce plugin versions = 1.2.13 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with contributor or higher permissions. This vulnerabilit...

Malicious code in preorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4622b9be5b244c749640e26bedf0371851204f7e3ea0f85a6a7d0ab305160471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5448 Malicious code in preorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4622b9be5b244c749640e26bedf0371851204f7e3ea0f85a6a7d0ab305160471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New OAuth book: OAuth 2 in Action

Justin Richer and myself have been writing a book about OAuth. It gives a deep look at the OAuth 2.0 protocol including hands on examples and practical implementation vulnerabilities to avoid. You can preorder the book today or you can download the first chapter for free on the publisher’s websit...