WordPress FIT: Featured Image Toolkit plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FIT: Featured Image Toolkit plugin versions = 1.0.3. Solution No patched version available...

WordPress Code Manager plugin < 1.0.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Code Manager plugin versions 1.0.14. Solution Update the WordPress Code Manager plugin to the latest available version at least 1.0.14...

WordPress NicheBase theme < 1.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress NicheBase theme versions 1.2.2. Solution Update the WordPress NicheBase theme to the latest available version at least 1.2.2...

WordPress Order Redirects for WooCommerce plugin <= 0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Order Redirects for WooCommerce plugin versions = 0.8. Solution Update the WordPress Order Redirects for WooCommerce plugin to the latest available version at least 0.8.1...

WordPress WooKit – WooCommerce Tools & Customizations plugin <= 1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooKit – WooCommerce Tools & Customizations plugin versions = 1.4. Solution No patched version available...

WordPress wGauge – Free Version plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress wGauge – Free Version plugin versions = 1.0.0. Solution No patched version available...

WordPress ListPlus – Unlimited Listing Directory plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ListPlus – Unlimited Listing Directory plugin versions = 1.0.4. Solution No patched version available...

WordPress WP Event Partners – WordPress Plugin for Event and Conference Management plugin <= 1.2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Event Partners – WordPress Plugin for Event and Conference Management plugin versions = 1.2.4. Solution No patched version available...

WordPress Events Addon for Elementor plugin < 1.9.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Events Addon for Elementor plugin versions 1.9.8. Solution Update the WordPress Events Addon for Elementor plugin to the latest available version at least 1.9.8...

WordPress ICEcoder integration plugin <= 2.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ICEcoder integration plugin versions = 2.0.2. Solution No patched version available...

WordPress Quick Event Manager plugin < 9.2.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Quick Event Manager plugin versions 9.2.17. Solution Update the WordPress Quick Event Manager plugin to the latest available version at least 9.2.17...

WordPress SnazzyAdmin WP Admin Theme plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SnazzyAdmin WP Admin Theme plugin versions = 1.0.2. Solution No patched version available...

Unauthorised AJAX Calls via Freemius

Description The plugins and themes use an insecure version of the Freemius Framework, which is lacking CSRF and/or authorisation in some of its AJAX actions. As a result, any authenticated users, such as subscriber could access the debug logs. Unauthenticated attackers could also make a logged in...

WordPress Zipcode Redirect plugin < 3.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Zipcode Redirect plugin versions 3.0.2. Solution Update the WordPress Zipcode Redirect plugin to the latest available version at least 3.0.2...

WordPress Custom User Guide plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Custom User Guide plugin versions = 1.0. Solution Update the WordPress Custom User Guide plugin to the latest available version at least 1.0.1...

WordPress DeMomentSomTres Media Tools Auto plugin <= 2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress DeMomentSomTres Media Tools Auto plugin versions = 2.0. Solution No patched version available...

WordPress Form Vibes – Database Manager for Forms plugin < 1.4.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Form Vibes – Database Manager for Forms plugin versions 1.4.3. Solution Update the WordPress Form Vibes – Database Manager for Forms plugin to the latest available version at least 1.4.3...

WordPress WP BugBot plugin <= 1.8.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP BugBot plugin versions = 1.8.0. Solution No patched version available...

WordPress Expire tags plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Expire tags plugin versions = 1.1. Solution No patched version available...

WordPress Ultimate SMS Notifications for WooCommerce plugin <= 1.8.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultimate SMS Notifications for WooCommerce plugin versions = 1.8.1. Solution Update the WordPress Ultimate SMS Notifications for WooCommerce plugin to the latest available version at least 1.8.4...