8 matches found
CVE-2024-6719
The Offload Videos WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow low privilege users to update them via a CSRF attack...
CVE-2024-6719
The Offload Videos WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow low privilege users to update them via a CSRF attack...
CVE-2024-6719
The Offload Videos WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow low privilege users to update them via a CSRF attack...
CVE-2024-6719 Offload Videos – Bunny.net, AWS S3 <= 1.0.1 Subscriber+ CSRF
The Offload Videos WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow low privilege users to update them via a CSRF attack...
CVE-2024-6719
The Offload Videos – Bunny.net, AWS S3 WordPress plugin, versions prior to 1.0.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF check when updating plugin settings, which could allow low-privilege users to modify these settings via a CSRF attack. I...
PT-2025-21495
Name of the Vulnerable Software and Affected Versions: The Offload Videos WordPress plugin versions prior to 1.0.1 Description: The issue concerns a lack of CSRF check when updating settings in the plugin, which could allow low-privilege users to update them via a CSRF attack. Recommendations: Fo...
WordPress plugin Offload Videos 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
CVE-2024-6719: Undefined Security Weakness
The Offload Videos WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow low privilege users to update them via a CSRF attack...