CVE-2026-46620

e107 is a content management system CMS. Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how sessionhandler::check handles CSRF tokens. Instead of requiring a token on every state-changing request, it only validates...

CVE-2026-46620

e107 is a content management system CMS. Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how sessionhandler::check handles CSRF tokens. Instead of requiring a token on every state-changing request, it only validates...

EUVD-2025-46620

Malicious code in lina-jus15-sukiwir npm...

CVE-2021-46620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2023-46620

CVE-2023-46620 is a CSRF vulnerability in the WordPress DeepL API translation plugin (Fluenx DeepL API translation) affecting versions up to 2.4.1.1 (per Patchstack/NVD). The issue stems from missing CSRF protection, potentially allowing unauthenticated users to trigger actions. The vulnerability...

WordPress DeepL Pro API translation Plugin <= 2.4.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software DeepL Pro API translation Type Plugin Vulnerable versions = 2.4.1.1 Fixed in 2.4.1.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46620 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 93ab7131fcdf Credits thien...

CVE-2022-46620

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-46620

creationtimestamp| type| source ---|---|--- 2022-02-18 22:41:26+00:00| seen| https://t.me/cibsecurity/37767...

CVE-2021-46620

CVE-2021-46620 affects Bentley MicroStation CONNECT 10.16.0.80. The connected ZDI advisory (ZDI-22-207) describes a vulnerability in FBX file parsing where improper validation can cause a read past the end of an allocated buffer. This results in an information disclosure vulnerability; exploitati...

CVE-2022-46620

CVE-2022-46620 entry is rejected/not used and does not represent an active vulnerability.