Clicky

CVE-2021-34645 – Alert Detail – Security Database

ByPR 24

Executive Summary

Informations
Name CVE-2021-34645 First vendor Publication 2021-08-19
Vendor Cve Last vendor Modification 2021-08-19

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34645

Sources (Detail)

Alert History

If you want to see full details history, please login or register.

0

Date Informations
2021-08-19 21:23:09

Similar Posts

What is a DDoS Extortion Attack and How do you Respond to it?

What is a DDoS Extortion Attack and How do you Respond to it?

ByPR 24

DDoS extortion attacks have skyrocketed over the past year and are expected to trend upwards in the future too. DDoS attacks aren’t new threats. However, cybercriminals are leveraging these attacks to extort money from organizations by causing downtimes and preventing legitimate users from accessing the web application. With the global pandemic forcing organizations to adopt…

Data-Wiping Attacks Hit Outdated Western Digital Devices

Data-Wiping Attacks Hit Outdated Western Digital Devices

ByPR 24

Breach Notification , Cybercrime , Endpoint Security Manufacturer Stopped Supporting Targeted Network-Attached Storage Devices in 2015 Mathew J. Schwartz (euroinfosec) • June 28, 2021     Screen grab posted by the owner of a LAN-connected Western Digital My Book Live after it was apparently hit by a data-wiping attack that also changed the device’s admin…

New malware “BlackRock” disguised as Android Clubhouse app

New malware “BlackRock” disguised as Android Clubhouse app

ByPR 24

The malware can also intercept text messages regardless of the fact that SMS-based two-factor authentication may be in use. A Trojan malware dubbed “BlackRock” is disguising as an Android version of the invite-only audio chat app called Clubhouse. It is worth noting that the app has no Android version at this moment. The cybersecurity researchers…

Innovative REvil Ransomware Operation Is Back

Innovative REvil Ransomware Operation Is Back

ByPR 24

Critical Infrastructure Security , Cybercrime , Cyberwarfare / Nation-State Attacks Group Specializing in Big Game Hunting Has Amassed Millions in Ransom Payments Mathew J. Schwartz (euroinfosec) • September 13, 2021     REvil ransom note seen by victims of the ransomware attack involving Kaseya’s software (Source: Cisco Talos) Has the notorious REvil ransomware group resumed…

NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers

NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers

ByPR 24

In its April slate of patches, Microsoft rolled out fixes for a total of 114 security flaws, including an actively exploited zero-day and four remote code execution bugs in Exchange Server. Of the 114 flaws, 19 are rated as Critical, 88 are rated Important, and one is rated Moderate in severity. Chief among them is…

Hacked SendGrid Accounts used In Phishing Attacks To Steal Logins

Hacked SendGrid Accounts used In Phishing Attacks To Steal Logins

ByPR 24

  A new cyber campaign has come to known as a phishing attack. Outlook Web Access and Office 365 services users are being targeted. The campaign collected the credentials of thousands of customers relying on trusted domains such as SendGrid.  The campaign named “Compact”, the Cyber actors behind these phishing attacks have been operating this…