WordPress WooCommerce Conversion Tracking Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Conversion Tracking Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ebb849878be Credits...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40561 Patch priority Low CVSS severity Low 5.4 Developer...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin <= 3.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin versions = 3.6.2. Solution Update the WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin <= 3.6.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin versions = 3.6.2. Solution Update the WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin to the...

WordPress WooCommerce Conversion Tracking plugin <=2.0.4 - Cross-Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF to XSS vulnerability found in WordPress WooCommerce Conversion Tracking plugin versions =2.0.4. Solution Update the WordPress WooCommerce Conversion Tracking plugin to the latest available version at least 2.0.6...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. PoC...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. ' /...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin <= 1.8 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by ThreatPress Research Team in WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin versions = 1.8. Solution 3 June 2018 - plugin still closed by WordPress Security team, no patched version available...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin <= 1.8 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by ThreatPress Research Team in WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking plugin versions = 1.8. Solution 3 June 2018 - plugin still closed by WordPress Security team, no patched version available...

Joomla VP Conversion Tracking 1.7 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: VP Conversion Tracking Plugin - SQL Injection Vulnerability Google Dork: N/A Date: 02.01.2018 Author: Abde Ouabala @AbdeOuabala url : https://www.virtueplanet.com/extensions/vp-conversion-tracking Version : 1.7 Tested on: BackBo...

Joomla VP Conversion Tracking 1.7 SQL Injection

Exploit Title: VP Conversion Tracking Plugin - SQL Injection Vulnerability Google Dork: N/A Date: 02.01.2018 Author: Abde Ouabala @AbdeOuabala url : https://www.virtueplanet.com/extensions/vp-conversion-tracking Version : 1.7 Tested on: BackBox Linux Description : plugin that helps you to track...