4 matches found
CVE-2023-4634
CVE-2023-4634 Exploit de RCE para el plugin Media-Library de WordPress 3.10 CVE-2023-4634 Información Patrowl descubrió una vulnerabilidad de RCE no autenticada en el plugin Media-Librairy-Assistant de WordPress en versiones 3.10. El exploit no es trivial y requiere solo una pequeña configuración...
9.8CVSS8.2AI score0.8589EPSS
SaveExploits6References1
Shopify: SSRF in hatchful.shopify.com
This vulnerability similar to https://hackerone.com/reports/156877 , that I found in your old version of your logo-creator. During logo-creating process the user can select logo in wysiwyg editor, then enter email address and wait. In this moment server send to user's browser large amount of data...
1.2AI score
SaveExploits0
20