WordPress CatFolders Document Gallery plugin < 2.0.7 - Unauthenticated Attachment Disclosure via REST API vulnerability

Unauthenticated Attachment Disclosure via REST API vulnerability discovered by Shikhali Jamalzade in WordPress Plugin CatFolders Document Gallery & PDF Library versions 2.0.7...

CVE-2024-53726

creationtimestamp| type| source ---|---|--- 2024-12-02 18:21:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113584615728103431...

CVE-2024-53726

Cross-Site Request Forgery CSRF vulnerability in RealtyCandy.com RealtyCandy IDX Broker Extended realtycandy-idx-broker-extended allows Stored XSS.This issue affects RealtyCandy IDX Broker Extended: from n/a through = 1.5.1...

CVE-2024-53726

CVE-2024-53726 describes a Cross-Site Request Forgery (CSRF) leading to Stored XSS in the WordPress plugin RealtyCandy IDX Broker Extended (versions

CVE-2024-53726 WordPress RealtyCandy IDX Broker Extended plugin <= 1.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RealtyCandy.com RealtyCandy IDX Broker Extended realtycandy-idx-broker-extended allows Stored XSS.This issue affects RealtyCandy IDX Broker Extended: from n/a through = 1.5.1...

WordPress RealtyCandy IDX Broker Extended Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software RealtyCandy IDX Broker Extended Type Plugin Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53726 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 24b8b3d7db9b Credits...