EUVD-2024-30405

Malicious code in bioql PyPI...

EUVD-2024-35484

Malicious code in bioql PyPI...

CVE-2024-35726

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

WordPress WooBuddy plugin <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update vulnerability

Cross-Site Request Forgery to Limited Settings Update vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin WooBuddy versions = 3.4.25...

WordPress WooBuddy plugin <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Settings Update vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin WooBuddy versions = 3.4.24...

CVE-2024-32603

Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.20...

CVE-2024-35726

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

CVE-2024-35726

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

CVE-2024-35726 WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

CVE-2024-35726

Technical details for CVE-2024-35726 are not publicly provided in the supplied documents. Monitor for official advisories from vendors/security sources for affected products and remediation guidance.

CVE-2024-35726 WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

WordPress plugin WooBuddy security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-26677

Name of the Vulnerable Software and Affected Versions ThemeKraft WooBuddy versions 3.4.19 and earlier Description The issue is related to a Missing Authorization vulnerability in ThemeKraft WooBuddy. Recommendations For ThemeKraft WooBuddy versions 3.4.19 and earlier, update to a version later th...

CVE-2024-35726: Missing Authorization

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19...

WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin WooBuddy versions = 3.4.19...

WordPress WooBuddy Plugin <= 3.4.19 is vulnerable to Broken Access Control

Software WooBuddy Type Plugin Vulnerable versions = 3.4.19 Fixed in 3.4.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35726 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b375cf67af7c Credits Abdi Pranata Required privilege...

CVE-2024-32603

Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.20...

CVE-2024-32603

Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.20...

CVE-2024-32603 WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.20...

CVE-2024-32603

CVE-2024-32603 affects the WordPress plugin ThemeKraft WooBuddy (WooBuddy) up to version 3.4.20. The issue is a deserialization of untrusted data that enables a PHP object-injection vulnerability (PHP Object Injection) due to an insecure deserialization process. The vulnerability is classified wi...