Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."...

CVE-2013-3256

Cross-site request forgery CSRF vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."...

PT-2013-4258

Name of the Vulnerable Software and Affected Versions Shareaholic SexyBookmarks plugin version 6.1.4.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users for requests that manipulate plugin settings. Recommendations For Shareaholic...

CVE-2013-3256: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."...

CVE-2013-3250

Cross-site request forgery CSRF vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

PT-2013-4255

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 1.8.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify the plugin's settings. Recommendations For...

PT-2013-3882

Name of the Vulnerable Software and Affected Versions Login With Ajax plugin versions prior to 3.1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify the plugin's settings. Recommendations For versions...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

xiuno bbs Forum background code execution Getshell vulnerabilities attached to the use of the method-vulnerability warning-the black bar safety net

Official description: Xiuno the name comes from the Saint Seiya Aries gold Saint Seiya Shura, his attack speed and combat effectiveness is zodiac the strongest, he is the speed and power of the incarnation; in the Buddhist inside, Shura is a six Channel One, in the humanity and heaven, between,...

CVE-2013-0731: Undefined Security Weakness

ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting XSS attacks by setting the wordpressloggedin cookie. NOTE: this is due to an...