WordPress Plugin POEditor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2024-24584 · Poeditor · Poeditor

Name of the Vulnerable Software and Affected Versions: POEditor versions 0.9.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin POEditor versions = 0.9.8...

WordPress POEditor Plugin <= 0.9.8 is vulnerable to Cross Site Scripting (XSS)

Software POEditor Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32453 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f8a43c0d4125 Credits Joshua Chan Required privilege Administrator...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091 WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091 WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in POEditor plugin = 0.9.4 versions...

CVE-2023-32091

CVE-2023-32091 is a CSRF vulnerability in the WordPress POEditor plugin, affecting versions ≤ 0.9.4. The issue allows unauthenticated CSRF actions that could impact authenticated users on sites using the plugin. Patch information indicates a fix in version 0.9.5; upgrading to that version is the ...

POEditor < 0.9.5 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin POEditor Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2023-23601 · Unknown · Poeditor Plugin

Name of the Vulnerable Software and Affected Versions: POEditor plugin versions 0.9.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software POEditor Type Plugin Vulnerable versions = 0.9.4 Fixed in 0.9.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32091 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 93cce2a104f7 Credits Elliot Required privilege...

CVE-2023-4209

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

Cross site request forgery (csrf)

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

CVE-2023-4209 POEditor < 0.9.8 - Settings Reset via CSRF

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

CVE-2023-4209

CVE-2023-4209: The POEditor WordPress plugin prior to version 0.9.8 is vulnerable to CSRF due to missing checks in multiple areas, enabling an attacker to trick a logged-in admin into performing actions such as resetting settings or updating the API key. Public sources (NVD, Red Hat, CVE lists) c...

PT-2023-28262 · WordPress · Poeditor

Name of the Vulnerable Software and Affected Versions: POEditor WordPress plugin versions prior to 0.9.8 Description: The issue is related to the lack of CSRF checks in various places within the plugin, allowing attackers to perform unwanted actions on logged-in admins, such as resetting the...

WordPress plugin POEditor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...