capitalnacionaldelaseda.gov.co Improper Access Control vulnerability OBB-3791987

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.6.7 - Authenticated (Subscriber+) Privilege Escalation

Description The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 7.6.6. This is due to the plugin improperly restricting user meta values that can be updated and allowing users t...

santpol.edu.es Cross Site Scripting vulnerability OBB-3783571

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

agenziacoesione.gov.it Cross Site Scripting vulnerability OBB-3783532

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for CVE-2023-36025

CVE-2023-36025 Simple test for CVE-2023-36025, based...

mail.sena.edu.co Cross Site Scripting vulnerability OBB-3782943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unvirtual.medellin.unal.edu.co Cross Site Scripting vulnerability OBB-3782500

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-41597

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet...

CVE-2023-41597

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet...

dipgra.euroinnova.edu.es Cross Site Scripting vulnerability OBB-3779621

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

compstyle.am Improper Access Control vulnerability OBB-3779604

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

collection.brokenhill.nsw.gov.au Cross Site Scripting vulnerability OBB-3779068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

marcusoldham.vic.edu.au Cross Site Scripting vulnerability OBB-3779066

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-34384

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

CVE-2023-34384

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

CVE-2023-34384

CVE-2023-34384 affects the Kebo Twitter Feed WordPress plugin (versions

CVE-2023-34384 WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

CVE-2023-34384 WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

WordPress Plugin kebo-twitter-feed Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...