Fat Rat Collect Vulnerabilities

[en] The 胖鼠采集(Fat Rat Collect) 微信知乎简书腾讯新闻列表分页采集, 还有自动采集、自动发布、自动标签、等多项功能。开源插件 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to missing escaping on a URL in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attack...

Affected:

up to 2.7.4

Fixed in:

2.7.4

Disclosed:

Nov 13, 2024

CVE-2024-10577 on NVD →

The 胖鼠采集(Fat Rat Collect) 微信知乎简书腾讯新闻列表分页采集, 还有自动采集、自动发布、自动标签、等多项功能。开源插件 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to missing escaping on a URL in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers t...

CVSS:

6.1

Affected:

up to 2.7.3

Fixed in:

2.7.4

Disclosed:

Nov 12, 2024

CVE-2024-10577 on NVD →

[en] Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7.

Affected:

up to 2.6.1

Fixed in:

2.6.1

Disclosed:

Jun 13, 2024

CVE-2023-35045 on NVD →

The Fat Rat Collect plugin for WordPress is vulnerable to unauthorized action due to a missing capability check on the wp_ajax_frc_interface AJAX action versions up to, and including, 2.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to access restricted plugin functiona...

CVSS:

5.3

Affected:

up to 2.6.0

Fixed in:

2.6.1

Disclosed:

Jun 14, 2023

CVE-2023-35045 on NVD →