CVE-2024-57611

The content management system 07FLYCMS version V1.3.9 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability is located in the admin/doAdminAction.php?act=editShop&shopId endpoint, which may allow an attacker to perform unauthorized actions. To mitigate this risk, it is re...

CVE-2020-20627

The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change...