2941 matches found
CVE-2024-53784
CVE-2024-53784 affects the WordPress plugin Smart Marketing for WP (Smart Marketing SMS and Newsletters Forms). Description confirms a Missing Authorization vulnerability allowing exploitation of incorrectly configured access controls in versions up to 5.0.9. CVSS 3.1 base score 4.3 (Network, Low...
CVE-2024-53784 WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in E-goi Smart Marketing SMS and Newsletters Forms smart-marketing-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Marketing SMS and Newsletters Forms: from n/a through = 5.0.4...
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. A visu...
CVE-2024-51637
Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...
CVE-2024-51637 WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...
CVE-2024-51637 WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...
CVE-2024-51637
CVE-2024-51637 : WordPress WordPress Admin SMS Alert plugin (versions
WordPress plugin Admin SMS Alert 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
PT-2024-34781 · Unknown · Admin Sms Alert
Name of the Vulnerable Software and Affected Versions: Admin SMS Alert versions n/a through 1.1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
The vulnerability in the script htdocs/webinc/body/bsc_sms_send.php of the D-Link DIR-860L, DIR-865L, DIR-868L, DIR-880L routers allows a attacker to execute an XSS attack.
The vulnerability in the script htdocs/webinc/body/bscsmssend.php of the D-Link DIR-860L, DIR-865L, DIR-868L, and DIR-880L routers is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute XSS attacks through a specially created parameter for the...
CVE-2024-51688
Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through = 1.10.1...
CVE-2024-51688 WordPress FraudLabs Pro SMS Verification plugin <= 1.10.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through = 1.10.1...
CVE-2024-51688 WordPress FraudLabs Pro SMS Verification plugin <= 1.10.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro SMS Verification fraudlabs-pro-sms-verification allows Stored XSS.This issue affects FraudLabs Pro SMS Verification: from n/a through = 1.10.1...
CVE-2024-51688
CVE-2024-51688 — FraudLabs Pro SMS Verification (WordPress) A CSRF-induced Cross‑Site Scripting vulnerability exists in the FraudLabs Pro SMS Verification WordPress plugin for versions up to 1.10.1. The issue allows a stored XSS payload to be injected and persisted via a CSRF context. Reported un...
WordPress plugin FraudLabs Pro SMS Verification 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2024-34834 · Fraudlabs Pro · Fraudlabs Pro Sms Verification
Name of the Vulnerable Software and Affected Versions: FraudLabs Pro SMS Verification versions 1.10.1 and earlier Description: A Cross-Site Request Forgery CSRF issue exists in FraudLabs Pro SMS Verification, allowing Stored XSS. Recommendations: For versions 1.10.1 and earlier, update to a versi...
Crooks bank on Microsoft’s search engine to phish customers
We identified a new wave of phishing for banking credentials that targets consumers via Microsoft's search engine. A Bing search query for 'Keybank login' currently returns malicious links on the first page, and sometimes as the top search result. We have reported the fraudulent sites to Microsof...
WordPress FraudLabs Pro SMS Verification plugin <= 1.10.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin FraudLabs Pro SMS Verification versions = 1.10.1...
WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Admin SMS Alert versions = 1.1.0...
WordPress FraudLabs Pro SMS Verification Plugin <= 1.10.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software FraudLabs Pro SMS Verification Type Plugin Vulnerable versions = 1.10.1 Fixed in 1.10.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51688 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 7924a0d6c9b2 Credits...