330 matches found
CVE-2023-34171
CVE-2023-34171 = Cross-Site Request Forgery (CSRF) in the WordPress plugin “WP Report Post” by Alex Raven. Affected: WP Report Post plugin versions ≤ 2.1.2. Public records in the CVE describe a CSRF vulnerability, with NVD metrics listing CVSS v3.1 base score 8.8 (HIGH), attack vector Network, at...
CVE-2023-34171 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-25994
Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...
CVE-2023-25994
CVE-2023-25994 is a CSRF vulnerability in the WordPress Publish to Schedule plugin (versions
CVE-2023-25994 WordPress Publish to Schedule Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...
CVE-2023-34171: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-25994: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...
WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Arbitrary File Deletion
Software Awesome Support Type Plugin Vulnerable versions 6.1.5 Fixed in 6.1.5 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-5355 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID b2eca27b2e54 Credits Alex Sanford Require...
alex-uhrig.de Improper Access Control vulnerability OBB-3765938
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-45769
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-45769
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
alex-it-systems.de Improper Access Control vulnerability OBB-3765367
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-45769 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-45769
CVE-2023-45769 affects WordPress WP Report Post plugin
CVE-2023-45769: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...
CVE-2023-45010
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alex MacArthur Complete Open Graph plugin = 3.4.5 versions...
CVE-2023-45010
CVE-2023-45010 – WordPress Complete Open Graph Plugin ≤ 3.4.5 is vulnerable to admin+ Stored XSS. Root cause: insufficient input validation/escaping in plugin parameters, enabling stored XSS. Multiple connected sources (NVD, Red Hat, WP/distro feeds) confirm the vulnerability and affected version...
CVE-2023-45010: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alex MacArthur Complete Open Graph plugin = 3.4.5 versions...