Lucene search
+L

7 matches found

CNVD
CNVD
•added 2015/01/06 12:00 a.m.•21 views

WordPress Plugin Our Team Showcase (our-team-enhanced) Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability in WordPress plugin Our Team Showcase our-team-enhanced versions prior to 1.3 allo...

6.8CVSS6.7AI score0.01001EPSS
SaveExploits1References1
NVD
NVD
•added 2015/01/05 8:59 p.m.•30 views

CVE-2014-9523

Multiple cross-site request forgery CSRF vulnerabilities in the Our Team Showcase our-team-enhanced plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site...

6.8CVSS6.7AI score0.01001EPSS
SaveExploits1References1
Prion
Prion
•added 2015/01/05 8:59 p.m.•23 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Our Team Showcase our-team-enhanced plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site...

6.8CVSS7AI score0.01001EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2015/01/05 8:00 p.m.•56 views

CVE-2014-9523

The CVE-2014-9523 entries describe CSRF and XSS vulnerabilities affecting the WordPress plugin Our Team Showcase (our-team-enhanced) in versions before 1.3. An attacker can hijack administrator sessions to change plugin settings via unspecified vectors and trigger XSS through the sc_our_team_memb...

6.8CVSS6.8AI score0.01001EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2015/01/05 12:00 a.m.•8 views

PT-2015-4264

Name of the Vulnerable Software and Affected Versions Our Team Showcase our-team-enhanced plugin versions prior to 1.3 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct...

6.8CVSS0.01001EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/05 12:00 a.m.•11 views

CVE-2014-9523: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Our Team Showcase our-team-enhanced plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site...

6.8CVSS5.8AI score0.01001EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2014/12/12 12:00 a.m.•34 views

WordPress Our Team Showcase 1.2 CSRF / XSS

Title: WordPress 'Our Team Showcase' plugin - CSRF/XSS Version: 1.2 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/our-team-enhanced/ Notified WordPress: 2014/11/27 ----------------------------------------------------------------...

7.4AI score
SaveExploits0
Rows per page
Query Builder