3 matches found
CVE-2023-5821
The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they c...
WordPress plugin WP EasyCart θ·¨η«θ―·ζ±δΌͺι ζΌζ΄
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2021-16250
Name of the Vulnerable Software and Affected Versions: URL Shortify WordPress plugin versions prior to 1.5.1 Description: The issue is related to the lack of a CSRF check when bulk-deleting links or groups, which could allow attackers to make a logged-in admin delete arbitrary links and groups vi...