28 matches found
CVE-2023-46781
CVE-2023-46781 is a CSRF vulnerability in the WordPress plugin Current Menu Item for Custom Post Types, vulnerable in versions
CVE-2023-46781 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...
WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Current Menu Item for Custom Post Types Type Plugin Vulnerable versions = 1.5 Fixed in 1.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46781 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eea8363457b5 Credits...
CVE-2022-46781
creationtimestamp| type| source ---|---|--- 2023-04-06 20:27:08+00:00| seen| https://t.me/cibsecurity/61569 2025-02-14 10:05:08+00:00| seen| Telegram/rS4Zeo85Wswqlw5QB8lEKQQQTVobhjYVLBEwJIxKOqfVpW...
CVE-2022-46781
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...
CVE-2022-46781
The CVE-2022-46781 issue affects Arm Mali GPU Kernel Driver (Valhall r29p0–r41p0 before r42p0; Avalon r41p0 before r42p0). Root cause: improper GPU memory processing operations that allow a non-privileged user to access data outside the intended buffer bounds. Impact is limited data exposure outs...
CVE-2021-46781
The CVE-2021-46781 entry concerns the WordPress plugin Coming Soon by Supsystic (versions before 1.7.6). The issue is that the plugin does not sanitise and escape the tab parameter before echoing it in an attribute in the admin dashboard, causing a Reflected Cross-Site Scripting (XSS) vulnerabili...
CVE-2021-46781 Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting
The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...