Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/05 2:18 a.m.•30 views

CVE-2025-4199

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6.5AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/03 3:15 a.m.•32 views

CVE-2025-4199

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS0.00177EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/05/03 1:43 a.m.•34 views

CVE-2025-4199 Abundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS0.00177EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/05/03 1:43 a.m.•11 views

CVE-2025-4199 Abundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6.4AI score0.00177EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/03 12:00 a.m.•4 views

CVE-2025-4199: Cross-Site Request Forgery (CSRF)

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS8AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/03 12:00 a.m.•15 views

PT-2025-18935 · Unknown · Abundatrade Plugin

Name of the Vulnerable Software and Affected Versions: Abundatrade Plugin versions up to, and including, 1.8.02 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'abundatrade' page. This allows unauthenticated attackers to update...

6.1CVSS6.6AI score0.00177EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/05/03 12:00 a.m.•16 views

WordPress plugin Abundatrade Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

6.1CVSS6.7AI score0.00177EPSS
SaveExploits0References4
Rows per page
Query Builder