Lucene search
+L

75 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:54 a.m.8 views

CVE-2023-24007

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

8.8CVSS7.1AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:32 p.m.8 views

CVE-2022-1762

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers...

7.5CVSS6.7AI score0.01191EPSS
SaveExploits2References1
NVD
NVD
added 2023/05/26 12:15 p.m.30 views

CVE-2023-24007

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/26 12:15 p.m.5 views

CVE-2023-24007

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/26 12:15 p.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/26 11:57 a.m.7 views

CVE-2023-24007 WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/26 11:57 a.m.57 views

CVE-2023-24007

CVE-2023-24007 is a CSRF vulnerability in the WordPress plugin Admin Block Country (TheOnlineHero Tom Skroza) with affected versions up to 7.1.4. The issue stems from Cross-Site Request Forgery in the plugin, enabling unauthorized actions when a user is authenticated. Public sources in the connec...

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/26 11:57 a.m.35 views

CVE-2023-24007 WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/26 12:0 a.m.5 views

WordPress plugin admin-block-country 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.1AI score0.00256EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/02/23 12:0 a.m.15 views

Admin Block Country <= 7.1.4 - Cross-Site Request Forgery (CSRF)

The plugin does not protect some of its actions in the adminblockcountryinitialpage function against CSRF attacks, allowing an attacker to modify country blocks or methods on their behalf by tricking a logged in administrator to submit a crafted request...

8.8CVSS6.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/02/23 12:0 a.m.14 views

WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Admin Block Country Type Plugin Vulnerable versions = 7.1.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24007 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a91506c8122 Credits Mika Required...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/11/19 12:15 a.m.27 views

CVE-2022-41155

Block BYPASS vulnerability in iQ Block Country plugin = 1.2.18 on WordPress...

9.8CVSS0.00664EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/19 12:15 a.m.7 views

CVE-2022-41155

Block BYPASS vulnerability in iQ Block Country plugin = 1.2.18 on WordPress...

9.8CVSS5.8AI score0.00664EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/19 12:15 a.m.18 views

Security feature bypass

Block BYPASS vulnerability in iQ Block Country plugin = 1.2.18 on WordPress...

7.5CVSS9.3AI score0.00664EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/19 12:0 a.m.5 views

WordPress plugin iQ Block Country 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS8.3AI score0.00664EPSS
SaveExploits0References3
CVE
CVE
added 2022/11/18 11:17 p.m.66 views

CVE-2022-41155

CVE-2022-41155 is a Block BYPASS vulnerability in the WordPress iQ Block Country plugin, affecting versions prior to 1.2.19. The NVD indicates a critical impact (CVSSv3.1 base score 9.8; HIGH confidentiality, integrity, and availability impacts). Patch guidance from connected sources recommends u...

9.8CVSS7.3AI score0.00664EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/18 11:17 p.m.31 views

CVE-2022-41155 WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability

Block BYPASS vulnerability in iQ Block Country plugin = 1.2.18 on WordPress...

5.3CVSS9.6AI score0.00664EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/18 11:17 p.m.6 views

CVE-2022-41155 WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability

Block BYPASS vulnerability in iQ Block Country plugin = 1.2.18 on WordPress...

5.3CVSS6.4AI score0.00664EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/18 12:0 a.m.4 views

PT-2022-25684 · WordPress · Iq Block Country

Name of the Vulnerable Software and Affected Versions: iQ Block Country plugin versions prior to 1.2.19 Description: A Block BYPASS vulnerability exists in the iQ Block Country plugin on WordPress, allowing potential bypass of security measures. Recommendations: For iQ Block Country plugin versio...

9.8CVSS9.4AI score0.00664EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2022/09/28 12:0 a.m.24 views

WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability

Block BYPASS vulnerability was discovered by Brandon Roldan Patchstack Alliance in the WordPress iQ Block Country plugin versions = 1.2.18. Solution Update the WordPress iQ Block Country plugin to the latest available version at least 1.2.19...

9.8CVSS3.5AI score0.00664EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder