WordPress Plugin Big Store Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

The vulnerability of the Galaxy Store application stems from the lack of measures taken to protect the website structure. This allows attackers to execute JavaScript scripts during the loading of the website.

The vulnerability of the Galaxy Store application exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute a JavaScript script during the loading of the website...

CVE-2023-47110 Any value can be changed in the configuration table by an employee having access to block reassurance module

blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An ajax function in module blockreassurance allows modifying any value in the configuration table. This vulnerability has been patched in version 5.1.4...

CVE-2023-47365

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47365

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47365

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

Code injection

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

PT-2023-8655 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A cross-site scripting XSS issue in the web interface of Palo Alto Networks PAN-OS software allows a malicious authenticated read-write administrator to store a JavaScript...

PT-2023-30427 · Unknown · Lil.Off-Price Store Line

Name of the Vulnerable Software and Affected Versions: Lil.OFF-PRICE STORE Line version 13.6.1 Description: The issue allows remote attackers to send malicious notifications to victims due to the leakage of the channel access token. Recommendations: For Lil.OFF-PRICE STORE Line version 13.6.1,...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in Lil.OFF-PRICE STORE. A remote attacker could exploit the vulnerability to send a malicious notification to the victim...

CVE-2023-47365

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

CVE-2023-47114

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code. The Fides web application allows data subject users to request access to their personal data. If the...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber CMS version 2.0.1, which stems from the...

Scammers Use Fake Ledger App on Microsoft Store to Steal $800,000 in Crypto

By Deeba Ahmed After a surge of malware on the Google Play Store, is Microsoft also failing to properly vet apps for malware? This is a post from HackRead.com Read the original post: Scammers Use Fake Ledger App on Microsoft Store to Steal $800,000 in Crypto...

CVE-2023-46822

Unauth. Reflected Cross-Site Scripting' vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin = 2.7.2 versions...

CVE-2023-46822

A vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter.This issue affects Store Exporter: from n/a through = 2.7.2...

CVE-2023-46822 WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting' vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin = 2.7.2 versions...

CVE-2023-46822

CVE-2023-46822 affects the WordPress Store Exporter for WooCommerce plugin (Visser Labs Store Exporter for WooCommerce) version ≤ 2.7.2. The issue is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the plugin, with root cause identified as improper input handling/exposur...

CVE-2023-46822 WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting' vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin = 2.7.2 versions...

PT-2023-30237 · Visser · Visser Labs Store Exporter For Woocommerce

Name of the Vulnerable Software and Affected Versions: Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin versions = 2.7.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting vulnerability. This vulnerabili...