Lucene search
+L

8 matches found

Patchstack
Patchstack
•added 2024/09/17 10:05 a.m.•15 views

WordPress Posts reminder plugin <= 0.20 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Posts reminder versions = 0.20...

6.5CVSS7AI score0.00189EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/09/17 6:15 a.m.•14 views

CVE-2024-8093

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00189EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/17 6:15 a.m.•35 views

CVE-2024-8093

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00189EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/17 6:00 a.m.•16 views

CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.8AI score0.00189EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/17 6:00 a.m.•52 views

CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00189EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2024/09/17 12:00 a.m.•19 views

WordPress Posts reminder Plugin <= 0.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software Posts reminder Type Plugin Vulnerable versions = 0.20 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8093 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f49f52b3e7c5 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00189EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•1 views

CVE-2024-8093: Cross-Site Request Forgery (CSRF)

The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00189EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/17 12:00 a.m.•11 views

WordPress plugin Posts reminder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woocommerce is one of the e-commerce plugins.WordPress plugin is an application plugin...

6.5CVSS6.6AI score0.00189EPSS
SaveExploits1References2
Rows per page
Query Builder