EUVD-2024-28480

Malicious code in bioql PyPI...

CVE-2024-30560

Cross-Site Request Forgery CSRF vulnerability in 大侠WP DX-Watermark.This issue affects DX-Watermark: from n/a through 1.0.4...

CVE-2024-30560

Cross-Site Request Forgery CSRF vulnerability in 大侠WP DX-Watermark.This issue affects DX-Watermark: from n/a through 1.0.4...

CVE-2024-30560

CVE-2024-30560 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin DX-Watermark, affecting DX-Watermark versions up to 1.0.4. The entry shows a high base CVSS score (3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) with a base score of 9.6 and a CRITICAL severity, indicati...

CVE-2024-30560 WordPress DX-Watermark plugin <= 1.0.4 - CSRF to Arbitrary File Upload and XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in 大侠WP DX-Watermark.This issue affects DX-Watermark: from n/a through 1.0.4...

CVE-2024-30560 WordPress DX-Watermark plugin <= 1.0.4 - CSRF to Arbitrary File Upload and XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in 大侠WP DX-Watermark.This issue affects DX-Watermark: from n/a through 1.0.4...

WordPress plugin DX-Watermark 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

DX-Watermark <= 1.0.4 - Cross-Site Request Forgery

Description The DX-Watermark plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to upload arbitrary files and inject malicious web...

WordPress DX-Watermark plugin <= 1.0.4 - CSRF to Arbitrary File Upload and XSS vulnerability

CSRF to Arbitrary File Upload and XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin DX-Watermark versions = 1.0.4...

WordPress DX-Watermark Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software DX-Watermark Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-30560 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID 545443b5c1d7 Credits Dimas Maulana Required...