PT-2026-53042

Name of the Vulnerable Software and Affected Versions HD Quiz versions 2.2.0 through 2.2.1 Description The HD Quiz plugin for WordPress contains a Cross-Site Request Forgery CSRF flaw. This occurs because the hdq validate nonce function fails to properly validate nonces, which are unique tokens...

CVE-2022-4218: Cross-Site Request Forgery (CSRF)

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the listquizzes function. This makes it possible for unauthenticated attackers to delete quizzes and copy quizzes via a forged...

Cross site request forgery (csrf)

The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes...

CVE-2015-9418: Cross-Site Request Forgery (CSRF)

The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes...

PT-2019-7377

Name of the Vulnerable Software and Affected Versions Watu Pro plugin versions prior to 4.9.0.8 Description The issue allows an attacker to delete quizzes due to a CSRF flaw. Recommendations For versions prior to 4.9.0.8, update to version 4.9.0.8 or later to resolve the issue...