CVE-2024-3782

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user...

CVE-2024-3782

CVE-2024-3782 is a CSRF vulnerability in WBSAirback 21.02.04. The issue arises from an attacker creating a manipulated HTML form to trigger privileged actions when executed by a privileged user. The CVSS v3.1 vector indicates no user privileges required, network attack vector, and required user i...

CVE-2024-30219

Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for...

CVE-2024-2858

The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2739

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1307

The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and perform unauthorized actions...

CVE-2024-2858 Simple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRF

The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

Planex MZK-MF300N 安全漏洞

The Planex MZK-MF300N is a world's smallest class wireless LAN multi-pocket router from Planex Japan. A security vulnerability exists in the Planex MZK-MF300N. An attacker exploiting this vulnerability could perform unexpected actions...

WordPress Plugin Advanced Search 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-24404 · Unknown · Wp Mail Catcher

Name of the Vulnerable Software and Affected Versions: WP Mail Catcher versions through 2.1.6 Description: A Cross-Site Request Forgery CSRF issue affects James Ward WP Mail Catcher. This allows an attacker to perform unintended actions on a user's account. Recommendations: For WP Mail Catcher...

PT-2024-24022

Name of the Vulnerable Software and Affected Versions Andrew Rapps Dashboard To-Do List versions 1.3.1 and earlier Description A Cross-Site Request Forgery CSRF issue affects the Dashboard To-Do List, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

CVE-2024-3782: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user...

CVE-2024-2739: Cross-Site Request Forgery (CSRF)

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

PT-2024-24306

Name of the Vulnerable Software and Affected Versions CodePeople CP Media Player versions 1.1.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicati...

PT-2024-24571

Name of the Vulnerable Software and Affected Versions Asgaros Forum versions 2.8.0 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability in Thomas Belser Asgaros Forum. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

PT-2024-24400

Name of the Vulnerable Software and Affected Versions MultiParcels Shipping For WooCommerce versions prior to 1.16.9 Description A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations...

PT-2024-27765 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a Cross-Site Request Forgery vulnerability, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged use...

CVE-2024-2858: Cross-Site Request Forgery (CSRF)

The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-1755: Buffer Copy without Checking Size of Input

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...