RedPacket Security - InfoSec News & Tutorials

MailChimp Forms by MailMunch Plugin for WordPress cross-site request forgery | CVE-2023-45748

October 17, 2023

NAME__________MailChimp Forms by MailMunch Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress MailChimp Forms by MailMunch Plugin for WordPress 3.1.4Risk Level:4.3Exploitability:UnprovenConsequences:Gain...

WP Attachments Plugin for WordPress cross-site request forgery | CVE-2023-45651

October 17, 2023

NAME__________WP Attachments Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WP Attachments Plugin for WordPress 5.0.6Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________WP Attachments Plugin...

HTML5 Maps Plugin for WordPress cross-site request forgery | CVE-2023-45650

October 17, 2023

NAME__________HTML5 Maps Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress HTML5 Maps Plugin for WordPress 1.7.1.4Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HTML5 Maps Plugin...

WP Open Street Map Plugin for WordPress cross-site request forgery | CVE-2023-45645

October 17, 2023

NAME__________WP Open Street Map Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WP Open Street Map Plugin for WordPress 1.25Risk Level:5.4Exploitability:UnprovenConsequences:Gain...

CPT Shortcode Generator Plugin for WordPress cross-site request forgery | CVE-2023-45643

October 17, 2023

NAME__________CPT Shortcode Generator Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress CPT Shortcode Generator Plugin for WordPress 1.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________CPT...

Apache bRPC cross-site scripting | CVE-2023-45757

October 17, 2023

NAME__________Apache bRPC cross-site scriptingPlatforms Affected:Apache bRPC 0.9.0 Apache bRPC 1.0.0 Apache bRPC 1.1.0 Apache bRPC 1.2.0 Apache bRPC 1.3.0 Apache...

Apache InLong security bypass | CVE-2023-43668

October 17, 2023

NAME__________Apache InLong security bypassPlatforms Affected:Apache InLong 1.4.0 Apache InLong 1.5.0 Apache InLong 1.6.0 Apache InLong 1.7.0 Apache InLong 1.8.0Risk Level:7.5Exploitability:UnprovenConsequences:Bypass...

LibreNMS SQL injection | CVE-2023-5591

October 17, 2023

NAME__________LibreNMS SQL injectionPlatforms Affected:LibreNMS LibreNMS 1.47 LibreNMS LibreNMS 21.0 LibreNMS LibreNMS 20.0 LibreNMS LibreNMS 23.8.1 LibreNMS LibreNMS 23.8.0Risk Level:7.8Exploitability:UnprovenConsequences:Data Manipulation...

Apache InLong information disclosure | CVE-2023-43666

October 17, 2023

NAME__________Apache InLong information disclosurePlatforms Affected:Apache InLong 1.4.0 Apache InLong 1.5.0 Apache InLong 1.6.0 Apache InLong 1.7.0 Apache InLong 1.8.0Risk Level:6.5Exploitability:UnprovenConsequences:Obtain...

PixFields Plugin for WordPress cross-site request forgery | CVE-2023-45655

October 17, 2023

NAME__________PixFields Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress PixFields plugin for WordPress 0.7.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PixFields Plugin for WordPress is...