Aggregator

PsyOps of Phishing: A Wolf in Shepherd’s Clothing

Security Boulevard
4 months 3 weeks ago

I am sure all of us have encountered CAPTCHA while browsing the internet. “Verify you are human”, “I’m not a robot”, “Select all the squares with traffic lights” — it has become a recognized if not begrudging part of our regular interaction with today’s online content. We in part accept this mild inconvenience because we […]

The post PsyOps of Phishing: A Wolf in Shepherd’s Clothing appeared first on Allure Security.

The post PsyOps of Phishing: A Wolf in Shepherd’s Clothing appeared first on Security Boulevard.

Chris

CVE-2022-3537 | Role Based Pricing for WooCommerce Plugin up to 1.6.1 on WordPress unrestricted upload

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Role Based Pricing for WooCommerce Plugin up to 1.6.1 on WordPress and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2022-3537. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-3494 | Complianz Plugin/Complianz Premium Plugin on WordPress Translation sql injection

Vuldb Updates
4 months 3 weeks ago
A vulnerability classified as critical has been found in Complianz Plugin and Complianz Premium Plugin on WordPress. Affected is an unknown function of the component Translation Handler. The manipulation leads to sql injection. This vulnerability is traded as CVE-2022-3494. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-3536 | Role Based Pricing for WooCommerce Plugin up to 1.6.2 on WordPress Phar deserialization

Vuldb Updates
4 months 3 weeks ago
A vulnerability classified as critical was found in Role Based Pricing for WooCommerce Plugin up to 1.6.2 on WordPress. Affected by this vulnerability is an unknown functionality of the component Phar Handler. The manipulation leads to deserialization. This vulnerability is known as CVE-2022-3536. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad