CVE-2024-12478 - Critical Unrestricted File Upload Vulnerability in InvoicePlane <= 1.6.1
In early 2024, a critical vulnerability—CVE-2024-12478—was discovered in popular open-source invoice management software InvoicePlane, affecting all versions up to 1.
CVE-2024-12362 - Path Traversal Vulnerability in InvoicePlane ≤ 1.6.1 — Exploit and Fix
A serious vulnerability (CVE-2024-12362) was recently discovered in InvoicePlane, a popular open-source invoicing tool used by small businesses across the globe. If
CVE-2024-54262 - How a File Upload Vulnerability in Import Export For WooCommerce (Pre-1.5) Leads to Web Shell Exploitation
On June 2024, a serious security flaw, now identified as CVE-2024-54262, was found in the "Import Export For WooCommerce" plugin by
CVE-2023-41848 - Exploiting the Missing Authorization in Carousel Slider (Up To 2.2.2)
In late 2023, a vulnerability tagged CVE-2023-41848 was disclosed, affecting the popular *Carousel Slider* WordPress plugin by Majeed Raza. This plugin is used
CVE-2023-41671 - Abandoned Cart Lite for WooCommerce Missing Authorization – Exploit Details, Code, and Mitigation
WordPress powers about 43% of all websites, and WooCommerce is the most popular eCommerce plugin. If you run an online shop, you probably care about
Episode
00:00:00
00:00:00