106 matches found
CVE-2024-37469
CVE-2024-37469 is a CSRF vulnerability in the WordPress Blocksy theme (vulnerable up to 2.0.22). The root cause is a CSRF oversight in Blocksy that allows unauthorized actions to be performed remotely. Affected versions include 2.0.22 and earlier; the issue is fixed in 2.0.23. Public sources char...
PT-2024-35936 · Adobe · Captivate Sync
Name of the Vulnerable Software and Affected Versions: Captivate Sync versions through 2.0.22 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...
WordPress Captivate Sync plugin <= 2.0.22 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Captivate Sync versions = 2.0.22...
WordPress Grow by Tradedoubler plugin < 2.0.22 - Unauthenticated LFI vulnerability
Unauthenticated LFI vulnerability discovered by Project Black in WordPress Plugin Grow by Tradedoubler versions 2.0.22...
WordPress Blocksy Theme <= 2.0.22 is vulnerable to Cross Site Request Forgery (CSRF)
Software Blocksy Type Theme Vulnerable versions = 2.0.22 Fixed in 2.0.23 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37469 Patch priority Low CVSS severity Low 5.4 Developer Creative Themes PSID a4b7cfca4dc7 Credits RE-ALTER Required privileg...
CVE-2024-31382
CVE-2024-31382: CSRF in Blocksy (Creative Themes HQ Blocksy) affecting Blocksy versions up to and including 2.0.22. Connected sources confirm the issue is CSRF, but no exploit details or confirmed fixed version are provided in the supplied documents. remediation/fix version is not specified in th...
PT-2024-24029 · Creativethemes · Blocksy
Name of the Vulnerable Software and Affected Versions: Blocksy versions 2.0.22 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Creative Themes HQ Blocksy. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions 2.0.22...
WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Blocksy versions = 2.0.22...
PT-2024-15057 · WordPress · Cookie Information
Name of the Vulnerable Software and Affected Versions: Cookie Information | Free GDPR Consent Solution plugin for WordPress versions up to, and including, 2.0.22 Description: The issue is related to a missing capability check on the AJAX request handler, allowing authenticated attackers with...
VulnCheck KEV: CVE-2023-6700
The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level...
SUSE CVE-2023-4829
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...
CVE-2023-4829 Cross-site Scripting (XSS) - Stored in froxlor/froxlor
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...
CVE-2023-4829 Cross-site Scripting (XSS) - Stored in froxlor/froxlor
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...
CVE-2023-4829 Cross-site Scripting (XSS) - Stored in froxlor/froxlor
Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.0.22...
PT-2023-30762 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor/froxlor versions prior to 2.0.22 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or...
SUSE CVE-2023-4304
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...
Froxlor vulnerable to business logic errors
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22...
PT-2023-28670 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.22 froxlor version 2.1.0 Description: The issue concerns Business Logic Errors in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later. For versi...