WordPress Plugin MyCryptoCheckout - Bitcoin, Ethereum, and 100+ altcoins for WooCommerce Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MyCryptoCheckout - Bitcoin...

WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)

Software MyCryptoCheckout Type Plugin Vulnerable versions = 2.125 Fixed in 2.126 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41693 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ad222fa8439e Credits qilin99 Required...

CVE-2023-1546

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

Cross site scripting

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2023-1546 MyCryptoCheckout < 2.124 - Reflected XSS

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2023-1546

CVE-2023-1546 affects the WordPress plugin MyCryptoCheckout prior to version 2.124. The issue is a Reflected Cross-Site Scripting caused by not escaping certain URLs output in HTML attributes. The NVD entry and the Nuclei template confirm this cross-site scripting flaw, with a CVSS v3.1 base scor...

CVE-2023-1546 MyCryptoCheckout < 2.124 - Reflected XSS

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

PT-2023-17066 · WordPress · Mycryptocheckout

Name of the Vulnerable Software and Affected Versions: MyCryptoCheckout WordPress plugin versions prior to 2.124 Description: The issue is related to Reflected Cross-Site Scripting. It occurs because some URLs are not properly escaped before being outputted in attributes. Recommendations: For...

WordPress plugin MyCryptoCheckout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress MyCryptoCheckout Plugin < 2.124 is vulnerable to Cross Site Scripting (XSS)

Software MyCryptoCheckout Type Plugin Vulnerable versions 2.124 Fixed in 2.124 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1546 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b58e27663e61 Credits Pablo Sanchez Required...