WordPress Responsive Flickr Gallery plugin <= 1.3.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Responsive Flickr Gallery versions = 1.3.1...

WordPress Responsive Flickr Gallery Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Responsive Flickr Gallery Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51630 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2660d8485b1c Credits SOPROBRO...

CVE-2024-5531

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2024-5531

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

CVE-2024-5531

CVE-2024-5531 : Ocean Extra (WordPress) is vulnerable to Stored Cross-Site Scripting via the Flickr Widget in all versions up to and including 2.2.8. The root cause is insufficient input sanitization and output escaping on user-supplied widget attributes, allowing an authenticated attacker with c...

Wordpress Ocean Extra plugin <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Flickr Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ocean Extra versions = 2.2.8...

Ocean Extra < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget

Description The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2023-25989

Cross-Site Request Forgery CSRF vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading...

CVE-2023-25989

Summary: CVE-2023-25989 is a CSRF vulnerability reported across multiple Meks WordPress plugins (Audio Player, Time Ago, ThemeForest Smart Widget, Smart Author Widget, Easy Maps, Easy Photo Feed Widget, Simple Flickr Widget, Easy Ads Widget, Smart Social Widget, and related plugins). The flaw ena...

WordPress Meks Simple Flickr Widget Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Meks Simple Flickr Widget Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25989 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ad7aa5e63051 Credits Muhammad Daff...

CVE-2023-25473

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

CVE-2023-25473

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

CVE-2023-25473 WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

CVE-2023-25473

CVE-2023-25473 — WordPress Flickr Justified Gallery Plugin

PT-2023-20091 · Unknown · Miro Mannino Flickr Justified Gallery

Name of the Vulnerable Software and Affected Versions: Miro Mannino Flickr Justified Gallery plugin versions = 3.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

WordPress Plugin Flickr Justified Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Flickr Justified Gallery Type Plugin Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25473 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e930ab154fff Credits Mika Required...

Flickr Justified Gallery <= 3.5 - Cross-Site Request Forgery

The plugin does not properly validate incoming requests using nonces, leading to a potential Cross-Site Request Forgery CSRF vulnerability...

Mozilla: Flickr API key leaked in GitHub commit

An API key was leaked in a GitHub commit. The key granted access to a Flickr account, allowing unauthorized access to uploaded photos and metadata without permission...