Lucene search
+L

145 matches found

CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•11 views

WordPress Plugin MailMunch - Grow your Email List Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MailMunch - Grow your Emai...

8.8CVSS6.6AI score0.00253EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/10/10 12:00 a.m.•13 views

MailMunch – Grow your Email List < 3.1.3 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS6.4AI score0.00253EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•23 views

PT-2023-28118 · WordPress · Mailmunch

Name of the Vulnerable Software and Affected Versions: MailMunch MailMunch – Grow your Email List plugin versions = 3.1.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.8AI score0.00253EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•4 views

CVE-2023-41852: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MailMunch MailMunch – Grow your Email List plugin = 3.1.2 versions...

8.8CVSS7.8AI score0.00253EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2023/09/05 12:00 a.m.•17 views

WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software MailMunch – Grow your Email List Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41852 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a9b8babe6424 Credits Ab...

8.8CVSS6.9AI score0.00253EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder