EUVD-2024-29796

Malicious code in bioql PyPI...

CVE-2024-31938

Cross-Site Request Forgery CSRF vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7...

NewsXpress < 1.0.8 - Cross-Site Request Forgery to Notice Dismissal

Description The NewsXpress theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.7. This is due to missing or incorrect nonce validation on the dismissedhandler function. This makes it possible for unauthenticated attackers to dismiss notices via a...

CVE-2024-31938

Cross-Site Request Forgery CSRF vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7...

CVE-2024-31938 WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7...

CVE-2024-31938

CVE-2024-31938 is a CSRF issue affecting Themeinwp NewsXpress (NewsXpress) up to version 1.0.7. The connected Red Hat entry reiterates the CSRF description without enabling concrete exploit or remediation details in the provided documents. No public patch/version fix is listed here; monitor for o...

CVE-2024-31938 WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7...

WordPress Plugin NewsXpress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme NewsXpress versions = 1.0.7...

WordPress NewsXpress Theme <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software NewsXpress Type Theme Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31938 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fbdf2aa209f9 Credits Dhabaleshwar Das Required...