CyberSecBulletin

I-plug vulnerabilities

We track 1 vulnerability in I-plug products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest I-plug vulnerabilities

  • 7.5 High severity

    'OfferBox' App for Android: Use of Hard-coded Credentials

    CVE-2024-32988I-plug

    'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.