While testing the Genexis Platinum 4410 home router version 2.1 (software version P4410-V2-1.28), I was able to find that the router is vulnerable to Broken Access Control and CSRF. CVE-2020-25015 Summary Platinum 4410 is a compact router from...
On testing the popular log monitoring and management application, Nagios Log Server version 2.1.6 (latest at the time of testing), I found that it is vulnerable to Stored XSS attacks. CVE-2020-16157 Summary Nagios Log Server is a popular Centralized...
During the audit on an OpenCart website belonging to one of our Astra customers, Journal theme version 3.0.46 and below were found to expose sensitive data through SQL errors at a vulnerable endpoint. Journal version 3.1.0 fixing the issue was...
Some of the security issues commonly seen on a website can be taken care of using the .htaccess (hypertext access) file. In this article, I am gonna be showing the .htaccess configuration from my WordPress website and explain the security issues...
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin for WordPress version 5.1.0 and below were found to be vulnerable to stored XSS while I was auditing the plugin. Plugin version 5.1.2 with improved data sanitization was...
For over a year, I have been using a script that automates several of the initial steps taken when starting a new VAPT Project. Thanks to Docker and Homebrew, I am finally able to share this script and setup without worrying about the potential...
WPForms Plugin version 1.5.8.2 and below were found to be vulnerable to authenticated stored XSS while I was auditing the plugin. WPForms version 1.5.9 with improved data sanitization was released on March 5, 2020. CVE-2020-10385 Summary WPForms is...
Export Users to CSV is a WordPress plugin that allows website owners/admins to export users list and metadata in a CSV file. While testing the plugin, I was able to find that it is vulnerable to CSV Injection. CSV Injection, also known as Formula...
While testing the popular WordPress LMS plugin, Tutor LMS, for one of Astra‘s clients, I was able to find that the plugin is vulnerable to Cross-Site Request Forgery (CSRF). All WordPress websites using Tutor LMS version 1.5.2 and below are...
On testing the popular WordPress testimonials plugin, Strong Testimonials, I found multiple stored XSS vulnerabilities in the plugin. All WordPress websites using Strong Testimonials version 2.40.0 and below are affected. CVE-2020-8549 Summary...