WP-GDPR-Compliance-Plugin-Exploit

WordPress WP GDPR Compliance 插件漏洞 CVE-2018-19207 利用脚本 该 Python 脚本会创建一个管理员角色用户。请根据你的具体情况修改变量 baseurl、username 和 email。由于系统会向该邮箱发送一封用于设置新用户密码的邮件，因此需要一个可用的邮箱地址。 该脚本适用于版本 =1.4.2 的 WP GDPR Compliance 插件。 请仅在你自己拥有的网站上或获得授权时使用此脚本（例如在合法的渗透测试中）。 依赖 本脚本使用 Python 2.7 编写。未经测试，不保证能在 Python 3 中运行。 脚本使用了 Python...

WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option

The WP GDPR Compliance plugin allows unauthenticated users to execute any action and update any database value. This vulnerability is due to the lack of proper validation in the Includes/Ajax.php file. id: CVE-2018-19207 info: name: WP GDPR Compliance 1.4.3 - Unauthenticated Call Any Action or...

WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

WordPress Cookie Information/Free GDPR Consent Solution plugin prior to 2.0.8 contains a cross-site scripting vulnerability via the admin dashboard. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

EUVD-2024-31394

Malicious code in bioql PyPI...

CVE-2024-33682

Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...

CVE-2024-33682

Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...

CVE-2024-33682

Technical details for CVE-2024-33682 are not provided in the connected documents. Information such as affected versions, exploit vectors, impact, or fixes is not publicly disclosed here. Monitor for updates from official advisories and trusted vulnerability databases.

WordPress WP GDPR Compliance Plugin <= 2.0.22 is vulnerable to Broken Access Control

Software WP GDPR Compliance Type Plugin Vulnerable versions = 2.0.22 Fixed in 2.0.23 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-6700 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 6a981b3b2d5a Credits Lucio Sá Required...

CVE-2018-19207

The CVE-2018-19207 entry concerns the WordPress WP GDPR Compliance plugin (before 1.4.3). The vulnerability stems from improper handling of input to WordPress database operations (notably $wpdb-&gt;prepare()), enabling remote attackers to execute arbitrary code. Multiple sources (NVD, Nuclei temp...