32 matches found
CVE-2023-52190
CVE-2023-52190 concerns the WordPress plugin Coupon Referral Program (WP Swings) with an unauthenticated exposure of sensitive data. Public sources (Wordfence, Patchstack, and CVE listings) indicate: affected versions are up to and including 1.7.2; the issue is described as sensitive data exposur...
CVE-2023-52190: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue affects Coupon Referral Program: from n/a through 1.7.2...
WordPress Plugin Coupon Referral Program Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-14457 · WordPress · Wp Swings Coupon Referral Program
Name of the Vulnerable Software and Affected Versions: WP Swings Coupon Referral Program versions 1.7.2 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who shou...
WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure
Software Coupon Referral Program Type Plugin Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-52190 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 3514be0010e5 Credits Dave Jong Patchstac...
CVE-2023-46358
In the module "Referral and Affiliation Program" referralbyphone version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate has sensitive SQL calls that can be executed with a trivial ht...
CVE-2023-46358
In the module "Referral and Affiliation Program" referralbyphone version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate has sensitive SQL calls that can be executed with a trivial ht...
PT-2023-29978 · Unknown · Referral/Affiliation Program
Name of the Vulnerable Software and Affected Versions: Referral and Affiliation Program referralbyphone versions 3.5.1 and earlier Description: The issue allows a guest to perform SQL injection. The method ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate contains sensitive...
The Biggest Deepfake Abuse Site Is Growing in Disturbing Ways
A referral program and partner sites have spurred the spread of invasive, AI-generated “nude” images...
Zomato: [www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s)
Summary: Get free zomato gold membership using zomato iOS app. Description: add more details about this vulnerability 1 Login to the zomato iOS application. 2 Select zomato gold from the home screen. 3 Depending on your location, you will see different gold pack options. 4 Select any gold pack. 5...
Trend Micro Champions the AWS Marketplace Channel Opportunity Registration Program
Last year, Trend Micro launched our popular Deep Security as a Service offering on the AWS Marketplace, combining industry-leading threat protection for cloud workloads, effortless deployment, and the added bonus of a unified Amazon Web Services AWS bill. This has been a successful model for...