1053 matches found
CVE-2013-2705
Cross-site request forgery CSRF vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...
CVE-2013-2705: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...
PT-2014-2620
Name of the Vulnerable Software and Affected Versions WordPress Simple Paypal Shopping Cart plugin versions prior to 3.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations...
CVE-2013-2708
Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
CVE-2013-2708: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
CVE-2013-2706: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
PT-2014-2621
Name of the Vulnerable Software and Affected Versions Stream Video Player plugin version 1.4.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations For version 1.4.0,...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
CVE-2013-2693
Cross-site request forgery CSRF vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unspecified vectors...
CVE-2013-3251
Cross-site request forgery CSRF vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
PT-2014-2664
Name of the Vulnerable Software and Affected Versions qTranslate plugin versions 2.5.34 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings. Recommendations For qTranslate...
CVE-2013-3251: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...
WordPress XCloner插件跨站请求伪造漏洞
WordPress是一款内容管理系统。 应用程序允许用户通过未经验证检查的HTTP请求执行某些操作,攻击者可以利用漏洞在欺骗管理员用户登录特制网页时操纵插件设置。 0 WordPress XCloner Plugin 3.x WordPress XCloner Plugin 3.1.1版本以修复此漏洞,建议用户下载使用: http://wordpress.org/plugins/xcloner-backup-and-restore/changelog/...
CVE-2013-2701
Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...
CVE-2013-2701
The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...
CVE-2013-2701
Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...
CVE-2013-2701: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors...