Wrodpress Plugin Premmerce Redirect Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-23789

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

CVE-2023-23789

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

CVE-2023-23789 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

CVE-2023-23789 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...

CVE-2023-23789

CVE-2023-23789 concerns the WordPress plugin Premmerce Redirect Manager . The vulnerability is a Stored XSS that requires admin+ privileges and affects plugin versions up to and including 1.0.9 (per original description). Connected sources also reference a broader vulnerability set in the same pl...

PT-2023-19203 · Premmerce · Premmerce Redirect Manager

Name of the Vulnerable Software and Affected Versions: Premmerce Premmerce Redirect Manager plugin versions prior to 1.0.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Premmerce...

WordPress plugin Premmerce Redirect Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Premmerce Plugin <= 1.3.18 is vulnerable to Cross Site Request Forgery (CSRF)

Software Premmerce Type Plugin Vulnerable versions = 1.3.18 Fixed in 1.3.19 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23719 Patch priority Low CVSS severity Low 5.4 Developer Premmerce PSID fb315e7c6849 Credits István Márton Required...

WordPress Premmerce Redirect Manager Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce Redirect Manager Type Plugin Vulnerable versions = 1.0.11 Fixed in 1.0.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23789 Patch priority Low CVSS severity Low 5.9 Developer Premmerce PSID d4a40e7e7165 Credits Rio Darmawan...

Premmerce Redirect Manager <= 1.0.10 - Cross-Site Request Forgery

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Premmerce Redirect Manager Plugin <= 1.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Premmerce Redirect Manager Type Plugin Vulnerable versions = 1.0.10 Fixed in 1.0.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23787 Patch priority Low CVSS severity Low 4.3 Developer Premmerce PSID 4891eb37f0e4 Credits Rio Darmawan...

WordPress Premmerce Brands for WooCommerce plugin <= 1.2.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce Brands for WooCommerce plugin versions = 1.2.11. Solution Update the WordPress Premmerce Brands for WooCommerce plugin to the latest available version at least 1.2.12...

WordPress Premmerce Variation Swatches for WooCommerce plugin <= 1.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce Variation Swatches for WooCommerce plugin versions = 1.2.0. Solution Update the WordPress Premmerce Variation Swatches for WooCommerce plugin to the latest available version at least 1.2.1...

WordPress Premmerce Redirect Manager plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce Redirect Manager plugin versions = 1.0.6. Solution Update the WordPress Premmerce Redirect Manager plugin to the latest available version at least 1.0.7...

WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce Product Search for WooCommerce plugin versions = 2.2.2. Solution Update the WordPress Premmerce Product Search for WooCommerce plugin to the latest available version at least 2.2.3...

WordPress Premmerce Redirect Manager plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce Redirect Manager plugin versions = 1.0.6. Solution Update the WordPress Premmerce Redirect Manager plugin to the latest available version at least 1.0.7...

WordPress Premmerce WooCommerce Toolkit plugin <= 1.1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce WooCommerce Toolkit plugin versions = 1.1.6. Solution No patched version available...

WordPress Premmerce WooCommerce Toolkit plugin <= 1.1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce WooCommerce Toolkit plugin versions = 1.1.6. Solution No patched version available...