WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Vandana Lite versions = 1.1.9...

CVE-2024-37212

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212

CVE-2024-37212: CSRF to PHP Object Injection in Ali2Woo Lite (WordPress plugin) affects Ali2Woo Lite up to version 3.3.5. The entry notes no public exploitation details in the connected docs, and exploitation status is listed as null. CVSSv3.1 vectors indicate network access required, no privileg...

CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

WordPress plugin Ali2Woo Lite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Vandana Lite Theme <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Vandana Lite Type Theme Vulnerable versions = 1.1.9 Fixed in 1.2.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37243 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6d4dd2dbf84c Credits Dhabaleshwar Das Requir...

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability

Broken Access Control to XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin AliNext versions = 3.3.5...

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin AliNext versions = 3.4.6...

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.3 - CSRF to PHP Object Injection vulnerability

CSRF to PHP Object Injection vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin AliNext versions = 3.4.3...

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin AliNext versions = 3.3.5...

WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Chic Lite versions = 1.1.3...

WordPress WP-Lister Lite for eBay plugin <= 3.5.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Aman Rawat Patchstack Alliance in WordPress Plugin WP-Lister Lite for eBay versions = 3.5.8...

WordPress WP-Lister Lite for eBay Plugin <= 3.5.8 is vulnerable to Sensitive Data Exposure

Software WP-Lister Lite for eBay Type Plugin Vulnerable versions = 3.5.8 Fixed in 3.5.9 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-24709 Patch priority Low CVSS severity Low 7.5 Developer WP Lab PSID 227921a369c8 Credits Aman Rawat Required privileg...

WordPress Ali2Woo Lite Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37211 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e361f4846097 Credits Majed Refaea Required privilege...

WordPress Ali2Woo Lite Plugin <= 3.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.4.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37213 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1377af0c8513 Credits Majed Refaea Required...

WordPress Ali2Woo Lite Plugin <= 3.3.5 is vulnerable to Broken Access Control

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37210 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 02abd7b980c0 Credits Majed Refaea Required...

WordPress Chic Lite Theme <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Chic Lite Type Theme Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37104 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 44bae772d26e Credits Dhabaleshwar Das Required...

WordPress Ali2Woo Lite Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.4.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37212 Patch priority Low CVSS severity Low 8.3 Developer Claim ownership PSID 02ba3348679b Credits Majed Refaea Required...