WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery

Overview WordPress Plugin "WPCS - WordPress Currency Switcher" provided by realmag777 contains a cross-site request forgery vulnerability CWE-352. Mizuki Takagi of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported and coordinated with...

Apple iOS 安全漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS that allows local users to view sensitive information in the application switcher. The following products and versions are affected: iPhone 6s and later, iPad Pro all...

CVE-2020-9780

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

CVE-2020-9780

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

CVE-2020-9780

CVE-2020-9780 affects Apple iOS/iPadOS Mail: a local attacker may view deleted content in the app switcher due to previews not being cleared when content is deleted. Root cause: previews weren’t cleared, allowing visibility of deleted mail content in the app switcher. Impact is limited to a local...

PT-2020-20755

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.4 iPadOS versions prior to 13.4 Description A local user may be able to view deleted content in the app switcher due to an issue that was resolved by clearing application previews when content is deleted. Recommendatio...

CVE-2020-9780: Improper Removal of Sensitive Information Before Storage or Transfer

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

WordPress Currency Switcher for WooCommerce <= 2.11.1 - Security Restrictions Bypass vulnerability

Security Restrictions Bypass vulnerability found by Luka Šikić in WordPress Currency Switcher for WooCommerce versions = 2.11.1 Solution Update the WordPress Currency Switcher for WooCommerce plugin to the latest available version at least 2.11.2...

CVE-2019-18668

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

CVE-2019-18668

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

Default configuration

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

CVE-2019-18668

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

CVE-2019-18668

Summary of CVE-2019-18668 : The Currency Switcher addon for WooCommerce (versions prior to 2.11.2) is vulnerable. If a user supplies a currency not configured by the administrator, the plugin may accept it and fall back to the default currency for price calculations. As a result, an attacker coul...

CVE-2019-18668

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

Currency Switcher addon for WooCommerce security bypass vulnerability

Currency Switcher addon for WooCommerce is a currency switcher addon for use in the WooCommerce e-commerce platform. A security bypass vulnerability exists in Currency Switcher addon for WooCommerce versions prior to 2.11.2, which can be exploited by an attacker to purchase items at a low price...

PT-2019-15568

Name of the Vulnerable Software and Affected Versions Currency Switcher addon for WooCommerce versions prior to 2.11.2 Description An issue allows an attacker to purchase items at a significantly cheaper price by providing a non-existent currency that is worth less than the default currency. If a...

CVE-2019-18668: Improper Handling of Exceptional Conditions

An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does not exist, it will be selected, but a price amount will fall back to the default currency. This...

User Agent String Switcher Service - XSS Vulnerabilities

Document Title: =============== User Agent String Switcher Service - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2189 Release Date: ============= 2019-08-13 Vulnerability Laboratory ID VL-ID: ====================================...

Free IP Switcher 3.1 - Computer Name Denial of Service Exploit

Exploit Title: Free IP Switcher 3.1 - Denial of Service PoC Discovery by: Victor Mondragón Vendor Homepage: http://www.eusing.com/index.html Software Link: http://www.eusing.com/ipscan/freeipscanner.htm Tested Version: 3.1 Tested on: Windows 10 Single Language x64 / Windows 7 x32 Service Pack 1...

Free IP Switcher 3.1 - 'Computer Name' Denial of Service (PoC)

Exploit Title: Free IP Switcher 3.1 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2018-02-14 Vendor Homepage: http://www.eusing.com/index.html Software Link: http://www.eusing.com/ipscan/freeipscanner.htm Tested Version: 3.1 Tested on: Windows 10 Single Language x64 /...