Lucene search
+L

49 matches found

OSV
OSV
added 2023/12/15 4:15 p.m.8 views

CVE-2023-49197

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/15 4:15 p.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

6.8CVSS7.2AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/15 3:39 p.m.52 views

CVE-2023-49197

CVE-2023-49197 affects the WordPress DoFollow Case by Case plugin up to version 3.4.2, with a Cross-Site Request Forgery (CSRF) vulnerability. The issue is resolved in version 3.5.0. According to sources, exploitation could occur without privileged access and may require user interaction, with hi...

8.8CVSS8AI score0.00271EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/15 12:0 a.m.7 views

WordPress Plugin DoFollow Case by Case Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.4AI score0.00271EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/12/12 12:0 a.m.16 views

DoFollow Case by Case < 3.5.0 - Email&URLs Adding to Allowlist via CSRF

Description The plugin does not have CSRF checks in its getEmail and getUrl functions, which could allow attackers to make logged in admins add email and URLs to the allow list via CSRF attacks...

8.8CVSS6.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/01 12:0 a.m.12 views

WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software DoFollow Case by Case Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.5.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49197 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1e74ba3bfbc6 Credits Skalucy...

8.8CVSS6.7AI score0.00271EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/05/30 12:0 a.m.2 views

WordPress Nya-Comment-DoFollow Plugin Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site request forgery vulnerability exists in the WordPress Nya-Comment-DoFollow...

7.2AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2019/05/29 12:0 a.m.181 views

WordPress Nya-Comment-DoFollow 1.0 Open Redirection

Exploit Title : WordPress Nya-Comment-DoFollow Plugins 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/05/2019 Vendor Homepage : wordpress.com Information Link : muzhiks.com/nyacommentsdofolloweng WordPress Affected Versions : 2.6.x, 2.5....

7.4AI score
SaveExploits0
xssed
xssed
added 2011/02/14 12:0 a.m.16 views

Unfixed Redirect vulnerability at successwithmichael.com

Security researcher SeeMe, has submitted on 14/02/2011 a Redirect vulnerability affecting successwithmichael.com, which at the time of submission ranked 881331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed...

SaveExploits0References1
Rows per page
Query Builder