Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Himanshu Parashar Google Site Verification plugin using Meta Tag.This issue affects Google Site Verification plugin using Meta Tag: from n/a through 1.2...

CVE-2023-32514

CVE-2023-32514 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Google Site Verification plugin using Meta Tag. The vulnerability affects versions up to 1.2 and requires unauthenticated access. Public documentation in Patchstack indicates the vulnerability exists for

CVE-2023-32514: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Himanshu Parashar Google Site Verification plugin using Meta Tag.This issue affects Google Site Verification plugin using Meta Tag: from n/a through 1.2...

WordPress Plugin Google Site Verification plugin using Meta Tag Cross Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Google Site...

WordPress WP Meta and Date Remover Plugin <= 2.3.0 is vulnerable to Broken Access Control

Software WP Meta and Date Remover Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47836 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 798396c8caad Credits Abdi Pranata Require...

Dovecot Mail Server Sequence Number Data Compromise

The vulnerability of the Dovecot mail server is related to improper elimination of sequence control and meta-characters. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

CVE-2023-46618

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2023-46618 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2023-46618

CVE-2023-46618 is a CSRF vulnerability affecting WordPress Category SEO Meta Tags plugin versions

PT-2023-30115 · WordPress · Category Seo Meta Tags

Name of the Vulnerable Software and Affected Versions: Category SEO Meta Tags plugin versions = 2.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-46618: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

WordPress Content Management Plugin Arbitrary Metadata Deletion

The vulnerabilities of the pmdmwpdeleteusermeta, pmdmwpdeletetermmeta, and pmdmwpajaxdeletemeta functions of the WordPress Content Management Plugin, Post Meta Data Manager, are related to incorrect authentication procedures. Exploiting these vulnerabilities could allow a malicious actor to...

Post Meta Data Manager Privilege Escalation

The vulnerability of the pmdmwpchangeusermeta and pmdmwpchangepostmeta functions in the Post Meta Data Manager plugin for the WordPress content management system is related to an incorrect authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileg...

CVE-2023-5669

The Featured Image Caption plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode and post meta in all versions up to, and including, 0.8.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2023-5669: Improper Neutralization of Input During Web Page Generation

The Featured Image Caption plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode and post meta in all versions up to, and including, 0.8.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2023-32252

Name of the Vulnerable Software and Affected Versions Featured Image Caption plugin for WordPress versions up to, and including, 0.8.10 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's shortcode and post meta. This...

Rocky Linux 8 : thunderbird (RLSA-2022:6708)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6708 advisory. - When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specifi...

Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access

Description The plugin leaks password-protected post content to unauthenticated visitors in some meta tags PoC As unauthenticated, view the source of any password-protected post and see that the content of the post is disclosed in the og:description and twitter:description meta tags...

CVE-2023-5707

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...