CVE-2023-5821: Undefined Security Weakness

The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they c...

Cross site request forgery (csrf)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsswap function. This makes it possible for unauthenticated attackers to manipulate products via a forged...

Cross site request forgery (csrf)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsvisibility function. This makes it possible for unauthenticated attackers to manipulate products via a forge...

PT-2023-11895

Name of the Vulnerable Software and Affected Versions Customizr theme for WordPress versions up to, and including, 4.3.0 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the czr fn post fields save function. This allows unauthenticated...

PT-2023-11893

Name of the Vulnerable Software and Affected Versions Hueman theme for WordPress versions up to, and including, 3.6.3 Description The issue is due to missing or incorrect nonce validation on the save meta box function, making it possible for unauthenticated attackers to save metabox data via a...

PT-2023-11898

Name of the Vulnerable Software and Affected Versions The RSS Aggregator by Feedzy plugin for WordPress versions up to, and including, 3.4.2 Description The issue is due to missing or incorrect nonce validation on the save feedzy post type meta function, making it possible for unauthenticated...

PT-2023-32241 · Undefined · Undefined

‼ CVE-2023-5655 ‼ The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 4.9.2. This is due to missing or incorrect nonce validation on the corresponding functions. This makes it possible for unauthenticated attackers to invoke those functions via a forged...

CVE-2023-4926: Cross-Site Request Forgery (CSRF)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkdeleteproducts function. This makes it possible for unauthenticated attackers to delete products via a forged request...

CVE-2020-36751: Cross-Site Request Forgery (CSRF)

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

CVE-2020-36753: Cross-Site Request Forgery (CSRF)

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the savemetabox function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

CVE-2023-4940: Cross-Site Request Forgery (CSRF)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsswap function. This makes it possible for unauthenticated attackers to manipulate products via a forged...

CVE-2023-4942: Cross-Site Request Forgery (CSRF)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsvisibility function. This makes it possible for unauthenticated attackers to manipulate products via a forge...

CVE-2020-36758: Cross-Site Request Forgery (CSRF)

The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.2. This is due to missing or incorrect nonce validation on the savefeedzyposttypemeta function. This makes it possible for unauthenticated attackers to update post...

CVE-2023-5534: Cross-Site Request Forgery (CSRF)

The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2. This is due to missing or incorrect nonce validation on the corresponding functions. This makes it possible for unauthenticated attackers to invoke those functions vi...

CVE-2023-4923: Cross-Site Request Forgery (CSRF)

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsdelete function. This makes it possible for unauthenticated attackers to delete products via a forged reques...

CVE-2021-4418: Cross-Site Request Forgery (CSRF)

The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save code snippets via a forged...

PT-2023-12530

Name of the Vulnerable Software and Affected Versions The Custom CSS, JS & PHP plugin for WordPress versions up to, and including, 2.0.7 Description The issue is due to missing or incorrect nonce validation on the save function, making it possible for unauthenticated attackers to save code snippe...

PT-2023-11899

Name of the Vulnerable Software and Affected Versions The Woody code snippets plugin for WordPress versions up to, and including, 2.3.9 Description The issue is due to missing or incorrect nonce validation on the runActions function, making it possible for unauthenticated attackers to activate an...

CVE-2023-5602: Cross-Site Request Forgery (CSRF)

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validation on several functions corresponding to AJAX actions. This makes it possible for...

PT-2023-31216 · WordPress · Bear

Name of the Vulnerable Software and Affected Versions: The BEAR for WordPress versions up to, and including, 1.1.3.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe bulkoperations visibility function. This allows...