10425 matches found
TikTok: CSRF in ticket function
A cross-site request forgery CSRF vulnerability was found on a TikTok Shop endpoint, which could have resulted in the arbitrary creation of tickets. The vulnerability was reported by @ibrahim0936356 to the TikTok team...
CVE-2022-46806
Cross-Site Request Forgery CSRF vulnerability in VillaTheme Cart All In One For WooCommerce plugin = 1.1.10 leading to cart modification...
CVE-2022-46805
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 leading to activation/deactivation of plugin rulesets...
CVE-2022-47148 WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin = 3.2.5 leading to popup dismiss...
CVE-2022-45804
Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...
CVE-2022-45068
Cross-Site Request Forgery CSRF vulnerability in Mercado Pago Mercado Pago payments for WooCommerce plugin = 6.3.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...
CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23974
The CVE-2023-23974 entry details a CSRF vulnerability in the WordPress plugin Fullworks Quick Event Manager
PT-2023-14757 · Unknown · Rbs Image Gallery
Name of the Vulnerable Software and Affected Versions: Rbs Image Gallery plugin versions = 3.2.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to changes in galleries hierarchy, as well as the deactivation and activation of included plugins...
PT-2023-15041 · Hasthemes · Shoplentor
Name of the Vulnerable Software and Affected Versions: HasThemes ShopLentor plugin versions = 2.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows for changes to plugin settings. Recommendations: For versions = 2.5.1, update to a version greater than 2.5.1 t...
CVE-2022-48309
A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90...
PT-2023-15040 · WordPress · Conversios All-In-One Google Analytics
Name of the Vulnerable Software and Affected Versions: Conversios All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce plugin versions = 5.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows for changes to the plugin settings. This can...
PT-2023-13608 · Imagely · Imagely Wordpress Gallery Plugin - Nextgen Gallery
Name of the Vulnerable Software and Affected Versions: Imagely WordPress Gallery Plugin - NextGEN Gallery versions prior to 3.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to thumbnail alteration. Recommendations: For versions prior to 3.2...
CVE-2022-48309
CVE-2022-48309 is a CSRF vulnerability in Sophos Connect prior to 2.2.90. Exploitation could allow a malicious site to retrieve logs and technical support archives, impacting confidentiality (CVSS v3.1 base score 4.3, MEDIUM). Affected product: Sophos Connect (versions before 2.2.90). Root cause:...
WordPress plugin TeraWallet–For WooCommerce 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2022-47179
Cross-Site Request Forgery CSRF vulnerability in Uwe Jacobs OWM Weather plugin = 5.6.11 leads to post duplication as a draft...
CVE-2023-23865 WordPress Stripe Payments For WooCommerce by Checkout Plugin <= 1.4.10 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...