PT-2024-15990 · WordPress · Infinite-Scroll

Name of the Vulnerable Software and Affected Versions: Infinite-Scroll plugin for WordPress versions up to, and including, 2.6.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the process ajax edit and process ajax delete functions...

GDPR/CCPA Cookie Consent CSRF

The vulnerability of the processdelete function in the class-DNSMPD.php component of the GDPR/CCPA Cookie Consent plugin for WordPress content management systems is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to execute a CSRF...

WordPress Plugin Complianz Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

PT-2023-22037

Name of the Vulnerable Software and Affected Versions WP EasyCart plugin for WordPress versions up to and including 5.4.8 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the process delete product function. This allows unauthenticated...