CVE-2024-32445

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team WebinarIgnition.This issue affects WebinarIgnition: from n/a through 3.05.8...

CVE-2024-32445

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition.This issue affects WebinarIgnition: from n/a through = 3.05.8...

CVE-2024-32132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codeboxr Team CBX Bookmark & Favorite.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

CVE-2024-32445 WordPress WebinarIgnition plugin <= 3.05.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition.This issue affects WebinarIgnition: from n/a through = 3.05.8...

CVE-2024-32445

CVE-2024-32445 is a CSRF vulnerability in Saleswonder’s WebinarIgnition plugin for WordPress, affecting WebinarIgnition up to version 3.05.8. The sources describe a CSRF flaw but do not provide exploitation details, confirmed patches, or exact affected configurations beyond that.

CVE-2024-32445 WordPress WebinarIgnition plugin <= 3.05.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team WebinarIgnition.This issue affects WebinarIgnition: from n/a through 3.05.8...

CVE-2024-32450

CVE-2024-32450 is a Cross-Site Request Forgery in MagePeople’s WordPress plugin WpTravelly, affecting up to version 1.6.0; root cause and fixes are not detailed in the provided connected documents; monitor for updates.

CVE-2024-32450 WordPress WpTravelly plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0...

CVE-2024-32132

CVE-2024-32132: CBX Bookmark & Favorite (WordPress plugin CBXWPBookmark) is affected by an SQL Injection vulnerability up to version 1.7.20. The connected Wordfence entry labels it as an Authenticated (Administrator+) SQL Injection, indicating exploitation requires an authenticated admin+ user; n...

CVE-2024-32147

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Form Plugin Team - GhozyLab Easy Contact Form Lite allows Stored XSS.This issue affects Easy Contact Form Lite : from n/a through 1.1.23...

CVE-2024-32147

CVE-2024-32147 affects the Form Plugin Team – GhozyLab Easy Contact Form Lite (WordPress plugin). The vulnerability is a Stored Cross‑Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected versions are from n/a up to 1.1.23. Public details in provided...

PT-2024-24076 · Unknown · Stefano Lissa & The Newsletter Team Newsletter

Name of the Vulnerable Software and Affected Versions: Stefano Lissa & The Newsletter Team Newsletter versions n/a through 8.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

CVE-2024-31233

creationtimestamp| type| source ---|---|--- 2024-04-13 05:31:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7035...

CVE-2024-31268

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-29278

creationtimestamp| type| source ---|---|--- 2024-04-11 12:08:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6877...

How Red Team Exercises Increases Your Cyber Health

Delve into the world of red team exercises, their vital role in enhancing organizational security through simulated cyberattacks, including tactics like phishing and lateral movement within networks, and understand the need for regular testing and improvement to counter evolving threats effective...

CVE-2024-2186

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2186

The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-1461

The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ attribute of the Team Members widget in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...