Nsk User Agent String Switcher Service 跨站脚本漏洞

Nsk User Agent String Switcher Service is an open source extension . It is used to pre-detect the user agent strings seen by web servers and client code when visiting a website. A security vulnerability exists in NSK User Agent String Switcher Service that allows an attacker to execute arbitrary...

WordPress Catch Duplicate Switcher plugin <= 1.5.2 - Unauthorized Plugin Setting Change vulnerability

Unauthorized Plugin Setting Change vulnerability discovered by apple502j in WordPress Catch Duplicate Switcher plugin versions = 1.5.2. Solution Update the WordPress Catch Duplicate Switcher plugin to the latest available version at least 1.6...

WordPress WooCommerce Multi Currency - Currency Switcher premium plugin <= 2.1.17 - Authenticated Product Price Change vulnerability

Authenticated Product Price Change vulnerability discovered by Jerome Bruandet NinTechNet in WordPress WooCommerce Multi Currency - Currency Switcher premium plugin versions = 2.1.17. Solution Update the WordPress WooCommerce Multi Currency - Currency Switcher premium plugin to the latest availab...

CVE-2021-1848

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

CVE-2021-1848

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

CVE-2021-1848

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

CVE-2021-1848

CVE-2021-1848 affects Apple iOS and iPadOS; a local user could view sensitive information in the app switcher due to UI handling issues. The issue is addressed in iOS 14.5 and iPadOS 14.5 with fixes described as improved UI handling. Public references (NVD, Red Hat advisory) confirm the local-acc...

PT-2021-13617

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: A local user may be able to view sensitive information in the app switcher due to an issue with UI handling. Recommendations: For iOS versions prior to 14.5, update to iOS...

CVE-2021-1848: Undefined Security Weakness

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

WordPress WOOCS – WooCommerce Currency Switcher plugin <= 1.3.6.2 - Local File Inclusion (LFI) leading vulnerability to Remote Code Execution (RCE)

Local File Inclusion LFI leading vulnerability to Remote Code Execution RCE discovered by Marc Montpas Automattic in WordPress WOOCS – WooCommerce Currency Switcher plugin versions = 1.3.6.2. Solution Update the WordPress WOOCS – WooCommerce Currency Switcher plugin to the latest available versio...

WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

The WooCommerce Currency Switcher plugin was vulnerable to LFI attacks via the "woocs" shortcode...

WordPress Currency Switcher plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Currency Switcher plugin 1.1.6 and prior...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20780

CVE-2021-20780 affects the WordPress plugin WPCS – WordPress Currency Switcher (versions 1.1.6 and earlier). The vulnerability is a Cross-site Request Forgery (CSRF) that can allow an attacker, while a logged-in admin views a malicious page, to perform unintended actions and hijack administrator ...

PT-2021-14235

Name of the Vulnerable Software and Affected Versions: WPCS - WordPress Currency Switcher versions 1.1.6 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. This could potentially lead to...

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Currency Switcher plugin 1.1.6 and prior...

CVE-2021-20780: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...