CVE-2024-7688

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

WordPress AZIndex plugin <= 0.8.1 - Index Deletion via CSRF vulnerability

Index Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin AZIndex versions = 0.8.1...

WordPress AZIndex plugin <= 0.8.1 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin AZIndex versions = 0.8.1...

CVE-2024-7687

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7687

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7688

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

CVE-2024-7688

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

CVE-2024-7687

AZIndex WordPress plugin (

CVE-2024-7688 AZIndex <= 0.8.1 - Index Deletion via CSRF

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

CVE-2024-7688 AZIndex <= 0.8.1 - Index Deletion via CSRF

The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary indexes via a CSRF attack...

CVE-2024-7688

CVE-2024-7688 affects the AZIndex WordPress plugin (versions

CVE-2024-7687 AZIndex <= 0.8.1 - Stored XSS via CSRF

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7687 AZIndex <= 0.8.1 - Stored XSS via CSRF

The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress AZIndex Plugin <= 0.8.1 is vulnerable to Cross Site Scripting (XSS)

Software AZIndex Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7687 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 093a060ad249 Credits Bob Matyas Required privileg...

WordPress plugin AZIndex 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress AZIndex Plugin <= 0.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software AZIndex Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7688 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID bdd657255bf1 Credits Bob Matyas Required privilege...

WordPress plugin AZIndex 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-38509 · WordPress · Azindex

Name of the Vulnerable Software and Affected Versions: AZIndex WordPress plugin versions 0.8.1 and earlier Description: The issue concerns a lack of CSRF checks in some areas of the plugin, as well as missing sanitization and escaping. This could allow attackers to make logged-in admins add Store...

PT-2024-38510 · WordPress · Azindex

Name of the Vulnerable Software and Affected Versions: AZIndex WordPress plugin versions 0.8.1 and earlier Description: The issue concerns a lack of CSRF checks in certain areas of the plugin, which could allow attackers to perform a CSRF attack. This flaw enables an attacker to make a logged-in...