Cookie Consent by Free Privacy Policy Generator 📌 WP-jobhunt Plugin up to 2.4 on WordPress AJAX Request admin-ajax.php cs_reset_pass() privilege escalation
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 WP-jobhunt Plugin up to 2.4 on WordPress AJAX Request admin-ajax.php cs_reset_pass() privilege escalation


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in WP-jobhunt Plugin up to 2.4 on WordPress (WordPress Plugin) and classified as critical. Affected by this issue is the function cs_reset_pass() of the file admin-ajax.php of the component AJAX Request Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 [webapps] WordPress Plugin Admin Menu Tree Page View 2.6.9 - Cross-Site Request Forgery / Privilege Escalation


📈 29.37 Punkte

📌 CVE-2023-1088 | WP Plugin Manager Plugin up to 1.1.7 on WordPress Plugin Activation cross-site request forgery


📈 25.6 Punkte

📌 Zendesk: Privilege escalation - Support-Contributor to Support and Product Admin via `/api/v2/██████` . No ADMIN PRIVILEGE required.


📈 24.78 Punkte

📌 admin-management-xtended Plugin up to 2.4.0.0 on WordPress wp_ajax privilege escalation


📈 24.37 Punkte

📌 Controlled Admin Access WordPress Plugin < = 1.4.0 - Improper Access Control & Privilege Escalation


📈 24.37 Punkte

📌 WordPress Absolutely Glamorous Custom Admin ag-custom-admin Plugin Database Backup Arbitrary File Download Vulnerability


📈 23.77 Punkte

📌 stops-core-theme-and-plugin-updates Plugin up to 8.0.4 on WordPress Option Change Nonce privilege escalation


📈 22.78 Punkte

📌 [webapps] WordPress Plugin CMS Tree Page View 1.4 - Cross-Site Request Forgery / Privilege Escalation


📈 22.55 Punkte

📌 Ninja Forms Plugin up to 2.9.42.0 on WordPress POST Request Injection privilege escalation


📈 22.55 Punkte

📌 wp-all-import Plugin up to 3.2.3 on WordPress Request privilege escalation


📈 22.55 Punkte

📌 ninja-forms Plugin up to 3.3.8 on WordPress Export Personal Data Request privilege escalation


📈 22.55 Punkte

📌 #0daytoday #WordPress Admin Menu Tree Page View 2.6.9 Plugin - Cross-Site Request Forgery / Privile [#0day #Exploit]


📈 21.95 Punkte

📌 admin-renamer-extended Plugin 3.2.1 on WordPress cross site request forgery


📈 21.95 Punkte

📌 simple-fields Plugin up to 1.1 on WordPress Admin Interface cross site request forgery


📈 21.95 Punkte

📌 responsive-menu Plugin up to 3.1.3 on WordPress Admin Interface cross site request forgery


📈 21.95 Punkte

📌 church-admin Plugin up to 1.2549 on WordPress Bible Reading Plan cross site request forgery


📈 21.95 Punkte

📌 invite-anyone Plugin up to 1.3.15 on WordPress Admin Panel cross site request forgery


📈 21.95 Punkte

📌 wp-customer-reviews Plugin up to 3.0.8 on WordPress Admin Tool cross site request forgery


📈 21.95 Punkte

📌 Elementor Contact Form DB Plugin up to 1.5 on WordPress Admin Page cross-site request forgery


📈 21.95 Punkte

📌 #0daytoday #WordPress Blue Admin 21.06.01 Plugin - Cross-Site Request Forgery Vulnerability [#0day #Exploit]


📈 21.95 Punkte

📌 [webapps] WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)


📈 21.95 Punkte

📌 CVE-2022-1695 | WP Simple Adsense Insertion Plugin up to 2.0 on WordPress Admin Page cross-site request forgery


📈 21.95 Punkte

📌 CVE-2022-1653 | Supsystic Social Share Buttons Plugin up to 2.2.3 on WordPress Admin Page cross-site request forgery


📈 21.95 Punkte

📌 CVE-2022-1599 | Admin Management Xtended Plugin up to 2.4.4 on WordPress cross-site request forgery


📈 21.95 Punkte

📌 CVE-2022-2184 | CAPTCHA 4WP Plugin up to 7.0.x on WordPress Admin Template require_once cross-site request forgery


📈 21.95 Punkte

📌 CVE-2023-23721 | David Gwyer Admin Log Plugin up to 1.50 on WordPress cross-site request forgery


📈 21.95 Punkte

📌 CVE-2023-41672 | Rémi Leclercq Hide Admin Notices Plugin up to 2.3.2 on WordPress cross-site request forgery


📈 21.95 Punkte

📌 CVE-2023-45276 | Automated Editor Plugin up to 1.3 on WordPress Admin Menu Pages cross-site request forgery


📈 21.95 Punkte

📌 CVE-2022-40700 | Custom Login Admin Front-end CSS Plugin on WordPress server-side request forgery


📈 21.95 Punkte

📌 CVE-2022-40700 | Admin CSS MU Plugin on WordPress server-side request forgery


📈 21.95 Punkte

📌 CVE-2024-1777 | Admin Side Data Storage for Contact Form 7 Plugin up to 1.1.1 on WordPress cross-site request forgery


📈 21.95 Punkte

📌 CVE-2021-24911 | Transposh WordPress Translation Plugin up to 1.0.7 on WordPress Admin Dashboard Page tp_translation tk0 cross site scripting


📈 21.83 Punkte

📌 Zomplog 3.8.2 Admin Account admin privilege escalation


📈 21.08 Punkte

📌 Monit up to 3.7.2 /admin/users/update admin privilege escalation


📈 21.08 Punkte

📌 CVE-2023-5931 | rtMedia Plugin/BuddyPress Plugin/bbPress Plugin up to 4.6.15 on WordPress unrestricted upload


📈 20.59 Punkte











matomo

Kontakt

24/7 [email protected]

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software