EUVD-2023-38073

Malicious code in bioql PyPI...

CVE-2023-33923

Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0...

CVE-2023-33923

Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0...

CVE-2023-33923

CVE-2023-33923 : Broken Access Control allowing authenticated users to activate arbitrary plugins in multiple HashThemes themes (Viral News, Viral, HashOne). Affected: Viral News up to 1.4.5; Viral up to 1.8.0; HashOne up to 1.3.0. Public records confirm a low- to moderate-severity issue (CVSS 4....

PT-2024-12450 · Hasthemes · Hashthemes Viral +2

Name of the Vulnerable Software and Affected Versions: HashThemes Viral News versions 1.4.5 and earlier HashThemes Viral versions 1.8.0 and earlier HashThemes HashOne versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in HashThemes products. This...

WordPress Viral News Theme <= 1.4.5 is vulnerable to Broken Access Control

Software Viral News Type Theme Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33923 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9e1913077f52 Credits Dave Jong Patchstack Required...