WP-Player <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Multi Uploader for Gravity Forms <= 1.1.3 - Unauthenticated Arbitrary File Upload

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Wp-Scribd-List <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Secure CAPTCHA <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Slides & Presentations <= 0.0.39 - Missing Authorization to Content Injection

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

DD Roles <= 4.1 - Authenticated (Subscriber+) Privilege Escalation

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Annie <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Mass Messaging in BuddyPress <= 2.2.1 - Reflected Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Board Election <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article

Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection

• 23 January 2025 · Trust & Safety
• (Threat Alert)
• ~ #CyberAdvisory, #InfoSec, #ThreatIntelligence

Stay updated on cybersecurity threats to safeguard your systems and data from... Read Full Article