The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the administrator, or if it does not exist, then to the first administrator.
#WEB3

The Secure Smart Contract Development Roadmap. The essential blueprint for crafting secure protocols.

SecureWeb3 Academy offers online training courses to provide awareness of a range of web3 risks and threats and how to mitigate these. our training delivers the latest information and valuable insights to help you and your organisation navigate the emerging landscape of web3 technology with confidence.

On Immunefi, hackers secure web3, save funds from theft, and get paid the world's largest bug bounties.

The Ethernaut is a Web3/Solidity based wargame played in the Ethereum Virtual Machine. Each level is a smart contract that needs to be 'hacked'. The game is 100% open source and all levels are contributions made by other players.

Compete against the world's top crypto security experts and make a name for yourself.

Expert Bug Bounty Platform for Crypto Projects.

Guide to cryptocurrency scams. Protect your digital assets introduction.

Your one-stop-shop to learn all about Blockchain development and Crypto Technologies.

Top auditors compete to keep high severity bugs out of production. Start a public or private audit within 48 hours.

Think out of the box. This blog talks about computer security. Tutorials about buffer overflow, Active Directory, everything is explained with examples.

Learn to harness next-gen technologies to build the bridges that will lead us to a better tomorrow.