Lucene search
K

7 matches found

Patchstack
Patchstack
added 2024/09/17 10:5 a.m.2 views

WordPress Posts reminder plugin <= 0.20 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Posts reminder versions = 0.20...

6.5CVSS7AI score0.00089EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2024/09/17 6:15 a.m.11 views

CVE-2024-8093

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00089EPSS
Exploits1References1
OSV
OSV
added 2024/09/17 6:15 a.m.1 views

CVE-2024-8093

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00089EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/09/17 6:0 a.m.9 views

CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.8AI score0.00089EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/09/17 6:0 a.m.13 views

CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00089EPSS
Exploits1References1
Patchstack
Patchstack
added 2024/09/17 12:0 a.m.7 views

WordPress Posts reminder Plugin <= 0.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software Posts reminder Type Plugin Vulnerable versions = 0.20 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8093 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f49f52b3e7c5 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00089EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2024/09/17 12:0 a.m.1 views

WordPress plugin Posts reminder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woocommerce is one of the e-commerce plugins.WordPress plugin is an application plugin...

6.5CVSS6.6AI score0.00089EPSS
Exploits1References2
Rows per page
Query Builder