CVE-2024-11122

A vulnerability, which was classified as critical, has been found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this issue is some unknown functionality of the file /crm/wechatSession/index.php?msgid=1&operation=upload. The manipulation of the argument file leads to unrestricted upload...

Lingdang CRM 代码问题漏洞

Lingdang CRM Lingdang CRM is a customer relationship management system from the Chinese company Lingdang Lingdang. A code issue vulnerability exists in Lingdang CRM version 8.6.4.3 and prior versions, which stems from the parameter file in file/crm/wechatSession/index.php?msgid=1&operation=upload...

WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin WeChat Subscribers Lite versions = 1.6.6...

WordPress WeChat Subscribers Lite Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)

Software WeChat Subscribers Lite Type Plugin Vulnerable versions = 1.6.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50522 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6111364515e3 Credits Muhamad Agil Fachrian...

Exploit for CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Authentication...

CVE-2024-9108

The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convertremoteimagetolocal' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2024-9106

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-9106 Wechat Social login <= 1.3.0 - Authentication Bypass

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-9106 Wechat Social login <= 1.3.0 - Authentication Bypass

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-9106

CVE-2024-9106 concerns the WordPress plugin Wechat Social login (

CVE-2024-9108

The CVE-2024-9108 entry concerns the WordPress plugin Wechat Social login (WeChat) for WordPress. Connected sources confirm the vulnerability exists in versions up to 1.3.0, enabling unauthenticated arbitrary file uploads via convert_remoteimage_to_local, with potential remote code execution. No ...

CVE-2024-9108 Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convertremoteimagetolocal' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2024-9108 Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convertremoteimagetolocal' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

WordPress Wechat Social login plugin <= 1.3.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Wechat Social login versions = 1.3.0...

WordPress Wechat Social login plugin <= 1.3.0 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Wechat Social login versions = 1.3.0...

WordPress plugin Wechat Social login 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

WordPress Wechat Social login Plugin <= 1.3.0 is vulnerable to Broken Authentication

Software Wechat Social login Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9106 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 26efb59ee707 Credits Istvá...

WordPress plugin Wechat Social login 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-39434 · WordPress · Wechat Social Login Plugin

Name of the Vulnerable Software and Affected Versions: Wechat Social login plugin for WordPress versions up to, and including, 1.3.0 Description: The issue is due to insufficient verification on the user being supplied during the social login, making it possible for unauthenticated attackers to l...

WordPress Wechat Social login Plugin <= 1.3.0 is vulnerable to Arbitrary File Upload

Software Wechat Social login Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-9108 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 7303314c8667 Credits István Márton Required privilege...