WordPress plugin Simple:Press 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Simple:Pre...

PT-2022-25312 · WordPress · Simple:Press

Name of the Vulnerable Software and Affected Versions: Simple:Press plugin for WordPress versions up to, and including, 6.8 Description: The issue concerns Stored Cross-Site Scripting via the postitem parameter manipulated during a forum response. This is due to insufficient input sanitization an...

Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs

By Waqas The flaw is tracked as CVE-2022-40684 in FortiOS, while its exploit is being sold on a popular Russian hacker forum. This is a post from HackRead.com Read the original post: Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs...

CVE-2022-40200

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40200

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

Privilege escalation

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40192

CVE-2022-40192 concerns a Cross-Site Request Forgery (CSRF) in the WordPress wpForo Forum plugin. The vulnerability affects plugin versions

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40200

The CVE CVE-2022-40200 affects the WordPress wpForo Forum plugin prior to 2.0.9. Authenticated users (subscriber+) can upload arbitrary files due to a vulnerability in the plugin, enabling potential unauthorized file writes. The issue is documented across multiple sources (NVD/NVD-derived records...

CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

PT-2022-25279 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to an Arbitrary File Upload vulnerability that affects authenticated subscribers and above in the wpForo Forum plugin on WordPress. Recommendations: For wpForo Foru...

PT-2022-25273 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress plugin wpForo Forum 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by dhakalananda Patchstack Alliance in WordPress wpForo Forum plugin versions = 2.0.9. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 2.1.0...

WordPress plugin wpForo Forum 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...