63 matches found
CVE-2025-47625: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Stored XSS.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...
WordPress plugin DoFollow Case by Case 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress...
CVE-2025-47624: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...
PT-2025-20190 · Unknown · Dofollow Case By Case
Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions 3.5.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the use...
CVE-2025-25152
Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...
CVE-2025-25152
Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...
CVE-2025-25152 WordPress Smart DoFollow plugin <= 1.0.2 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...
CVE-2025-25152
CVE-2025-25152 describes a CSRF to Stored XSS vulnerability in WordPress plugin Smart DoFollow (affected versions from n/a through 1.0.2). Base CVSS v3.1 score 7.1 ( HIGH ) with network attack vector, user interaction required. Root cause is CSRF enabling stored XSS. Connected documents indicate ...
WordPress plugin Smart DoFollow 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2025-25152: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...
PT-2025-5960 · Lukaszwiecek · Smart Dofollow
Name of the Vulnerable Software and Affected Versions: LukaszWiecek Smart DoFollow versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
WordPress Smart DoFollow plugin <= 1.0.2 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Smart DoFollow versions = 1.0.2...
CVE-2023-49197
Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...
CVE-2023-49197
Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...
CVE-2023-49197
CVE-2023-49197 affects the WordPress DoFollow Case by Case plugin up to version 3.4.2, with a Cross-Site Request Forgery (CSRF) vulnerability. The issue is resolved in version 3.5.0. According to sources, exploitation could occur without privileged access and may require user interaction, with hi...
WordPress Plugin DoFollow Case by Case Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-49197: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...
DoFollow Case by Case < 3.5.0 - Email&URLs Adding to Allowlist via CSRF
Description The plugin does not have CSRF checks in its getEmail and getUrl functions, which could allow attackers to make logged in admins add email and URLs to the allow list via CSRF attacks...
WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software DoFollow Case by Case Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.5.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49197 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1e74ba3bfbc6 Credits Skalucy...