CVE-2024-56046 - Exploiting WPLMS Unrestricted File Upload to Deploy a Web Shell
CVE-2024-56046 is a newly disclosed vulnerability affecting the popular WordPress plugin VibeThemes WPLMS, specifically in versions up to and including 1.9.9. This issue
CVE-2023-50850 - How a Missing Authorization Vulnerability in WooCommerce Subscriptions Could Expose Your Shop
Online stores rely heavily on plugins to enhance their e-commerce features. WooCommerce Subscriptions is one of the most popular plugins for adding subscription functionality to
CVE-2024-12856 - Remote OS Command Injection in Four-Faith F3x24 & F3x36 Routers Dissected
The world of network hardware often flies under the radar, but it’s a gold mine for attackers targeting devices left in the wild with
CVE-2024-11921 - Exploiting Reflected XSS in GiveWP WordPress Plugin < 3.19.
> Summary:
GiveWP, a popular WordPress donation plugin, had a dangerous security flaw (CVE-2024-11921) in versions before 3.19.. This bug allowed reflected Cross-Site Scripting
CVE-2024-56527 - How a Simple Missing Function in TCPDF Led to XSS Vulnerability
Summary:
A vulnerability was discovered in TCPDF before version 6.8.. The problem? The Error() function doesn't use htmlspecialchars() on error messages, opening
Episode
00:00:00
00:00:00