10424 matches found
PT-2023-20697 · Accesspress Themes · Accesspress Themes Wp Tfeed Plugin
Name of the Vulnerable Software and Affected Versions: AccessPress Themes WP TFeed plugin versions = 1.6.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
PT-2023-20695 · WordPress · Wpindeed Debug Assistant
Name of the Vulnerable Software and Affected Versions: WPIndeed Debug Assistant plugin versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
PT-2023-21133 · Meril · Meril Inc. Blog Floating Button Plugin
Name of the Vulnerable Software and Affected Versions: Meril Inc. Blog Floating Button plugin versions = 1.4.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
PT-2023-22252 · Plainware.Com · Shiftcontroller Employee Shift Scheduling
Name of the Vulnerable Software and Affected Versions: plainware.Com ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...
PT-2023-21758 · Mythemeshop · Mythemeshop Wp Shortcode
Name of the Vulnerable Software and Affected Versions: MyThemeShop WP Shortcode by MyThemeShop plugin versions = 1.4.16 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
PT-2023-21705 · Stranger Studios · Stranger Studios Force First/Last Name As Display Name Plugin
Name of the Vulnerable Software and Affected Versions: Stranger Studios Force First and Last Name as Display Name plugin versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user int...
PT-2023-21123 · WordPress · Wpgrim Classic Editor/Classic Widgets
Name of the Vulnerable Software and Affected Versions: WPGrim Classic Editor and Classic Widgets plugin versions 1.2.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...
PT-2023-21608 · WordPress · Wp Amaps
Name of the Vulnerable Software and Affected Versions: WP MAPS formerly WP Google Map Plugin versions = 4.4.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
CVE-2023-29440
Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board plugin = 2.10.3 versions...
PT-2023-23140 · WordPress · Wp Browserupdate Plugin
Name of the Vulnerable Software and Affected Versions: WP BrowserUpdate plugin versions = 4.4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that...
Simple Giveaways < 2.46.1 - CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
PT-2023-22255 · WordPress · Suplugins Superb Social Media Share Buttons/Follow Buttons
Name of the Vulnerable Software and Affected Versions: SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin versions = 1.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick ...
TS Webfonts for さくらのレンタルサーバ < 3.1.3 - Font Settings Change via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2023-31088
Cross-Site Request Forgery CSRF vulnerability in Faraz Quazi Floating Action Button plugin = 1.2.1 versions...
CVE-2023-31086
Cross-Site Request Forgery CSRF vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin = 2.46.0 versions...
CVE-2023-31088
Cross-Site Request Forgery CSRF vulnerability in Faraz Quazi Floating Action Button plugin = 1.2.1 versions...
CVE-2023-31086
CVE-2023-31086 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Simple Giveaways (Igor Benic) versions
CVE-2023-32501
The CVE-2023-32501 entry concerns the VikBooking Hotel Booking Engine & PMS WordPress plugin (versions
