CVE-2024-57611

The 07FLYCMS content management system, specifically version V1.3.9 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability exists in the admin/doAdminAction.php?act=editShop&shopId endpoint. This flaw allows an attacker to perform unauthorized actions on the shop managem...

CVE-2020-20627

The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change...