Mandrake Spyware Discovered After 2 Years in Google Play Store Apps – Active IOCs

CVE-2024-48362 – Apache Drill Vulnerability

July 31, 2024

Multiple WordPress Plugins Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2024-5253 CVSS:6.4

Ultimate Addons for WPBakery plugin for WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using the ult_team shortcode to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

CVE-2024-5251 CVSS:6.4

Ultimate Addons for WPBakery plugin for WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using the ultimate_pricing shortcode shortcode to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

CVE-2024-5254 CVSS:6.4

Ultimate Addons for WPBakery plugin for WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using the ultimate_info_banner shortcode to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

CVE-2024-5252 CVSS:6.4

Ultimate Addons for WPBakery plugin for WordPress is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using the ultimate_info_table shortcode to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

Impact

Cross-Site Scripting

Indicators of Compromise

CVE

CVE-2024-5253
CVE-2024-5251
CVE-2024-5254
CVE-2024-5252

Affected Vendors

WordPress

Affected Products

Ultimate Addons for WPBakery plugin for WordPress 3.19.20

Remediation

Upgrade to the latest version of Ultimate Addons for WPBakery Plugin, available from the WordPress Plugin Directory.

WordPress Plugin Directory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo