4041 matches found
PT-2019-14429
Name of the Vulnerable Software and Affected Versions facebook-for-woocommerce plugin versions prior to 1.9.14 Description The issue affects the facebook-for-woocommerce plugin, allowing for CSRF attacks. Recommendations For versions prior to 1.9.14, update to version 1.9.14 or later to resolve t...
PT-2019-14430
Name of the Vulnerable Software and Affected Versions facebook-for-woocommerce plugin versions prior to 1.9.15 Description The issue concerns a CSRF vulnerability. It can be exploited via specific API endpoints such as "ajax woo infobanner post click", "ajax woo infobanner post xout", or "ajax fb...
CVE-2019-15841: Cross-Site Request Forgery (CSRF)
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajaxwooinfobannerpostclick, ajaxwooinfobannerpostxout, or ajaxfbtogglevisibility...
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
Cross site request forgery (csrf)
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2019-15781
CVE-2019-15781 corresponds to a CSRF vulnerability in the WordPress plugin facebook-by-weblizar prior to version 2.8.5. The issue stems from insufficient verification that requests originate from a trusted user, enabling an attacker to induce unintended actions on behalf of an authenticated user....
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
PT-2019-14390
Name of the Vulnerable Software and Affected Versions facebook-by-weblizar plugin versions prior to 2.8.5 Description The issue concerns a CSRF problem. Recommendations For versions prior to 2.8.5, update to version 2.8.5 or later to resolve the issue...
CVE-2019-15781: Cross-Site Request Forgery (CSRF)
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2015-9350
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
CVE-2015-9351
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...
Cross site scripting
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
Design/Logic Flaw
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...
CVE-2015-9350
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
CVE-2015-9350
The CVE-2015-9350 entry concerns the WordPress plugin Feed Them Social before version 1.7.0, where the Facebook Feeds load more button is vulnerable to reflected cross-site scripting (XSS). The vulnerability allows injected client-side script to be executed in the context of the affected page. Pu...
CVE-2015-9351
CVE-2015-9351 concerns the WordPress plugin Feed Them Social (before 1.7.0). The vulnerability allows possible shortcode execution in the Facebook Feeds load more button, enabling arbitrary code execution via shortcode handling. Affected component: Feed Them Social plugin for WordPress; root caus...
CVE-2015-9351
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...
PT-2019-7310
Name of the Vulnerable Software and Affected Versions feed-them-social plugin versions prior to 1.7.0 Description The issue concerns possible shortcode execution in the Facebook Feeds load more button. Recommendations For feed-them-social plugin versions prior to 1.7.0, update to version 1.7.0 or...
PT-2019-7309
Name of the Vulnerable Software and Affected Versions feed-them-social plugin versions prior to 1.7.0 Description The issue concerns reflected XSS in the Facebook Feeds load more button. Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue...