WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Debug Assistant Type Plugin Vulnerable versions = 1.4 Fixed in 1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26516 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID 29fe448c29d4 Credits Prasanna V Balaji...

PT-2023-16698 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO plugin for WordPress versions up to, and including, 4.5.3 Description: The issue arises from a missing capability check on the listPostsCategory function, allowing authenticated attackers with subscriber-level access to obtain pos...

WordPress Paid Memberships Pro Plugin <= 2.9.11 is vulnerable to SQL Injection

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.9.11 Fixed in 2.9.12 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0631 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID c680ed84c0a0 Credits Marc Montpas Required privilege Subscribe...

WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.0.10 Fixed in 8.1.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26524 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c4b1a4af0da2 Credits Rio Darmawa...

WordPress wp2syslog Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software wp2syslog Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25974 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3e4ffc697cd7 Credits Prasanna V Balaji Required...

MAL-2023-6020 Malicious code in selfcvmineget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4560a94bbb0a95e86b6e7e4750034a706343fb6a8415d8dd3c77705006fa5e18 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3336 Malicious code in esqrandomhttpstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5ecb4860271b0ee8286ae981855b7aae9c4270246292eb9e1258ce6fbe97be5e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3258 Malicious code in esqproofvisacandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5aedf453442ee66a892462d0eeb86718bde0ce36761688dbceb048ee5b59e853 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3238 Malicious code in esqpostpongstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6edc1344d0d747b72e251d47850a208cf7492b43640c48ab920e9ec58753a330 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2804 Malicious code in esqcraftguicc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07647a8b2052d6bee42249bd5e6bf92ec20b544ce7a44e836209c20bc5c425ac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3380 Malicious code in esqrepymc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 095a097eab2f48a05502f2b72fa8c42c80cbd7957e960c326663e01a9a4bdffe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libencodeultrainfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 784672c439827c688d501aef7c51cd613a8c829999a1107d168f32edb7962ad2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6143 Malicious code in selfhackedcpuvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a8209408beebe2dc044b11633e8b264eaf0196dde9c30f741ce9c6e381d581a9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7478 Malicious code in tppywcandyping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a1f34b34cf7828f75342776dfcf13e9505e51bcde15f061d1a0e42c05199a984 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7102 Malicious code in tphackedpullpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9ff8422d1bbb04831664aff59cec75cfec9c86ad637f11cb4b11a7fbbfff1743 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2970 Malicious code in esqhydraramhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 92f7702dcafaccd82de61b5eaf50f91db4ef70b2fbf20141a9da2ddabcdb3cb5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4502 Malicious code in libsplitvirtualload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b2378ba2f6a0fa52b74e73476d88df59d29033726f05838a273c925ee16a4ce8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5514 Malicious code in py-pushguire (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffabd32675d8651e667bc1dc1b5063dce4306904ef348022685f2555f1fa4f69 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2869 Malicious code in esqgamegrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20a814115976921535940566feabff918f934dba1dd721c8d4729f7b0da4c0c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3996 Malicious code in libgameremask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d6d3e79ee364900e59e74d0af563ff4cc8318d8d96434da943f1760acee88d92 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...