Lucene search
K

3 matches found

Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.7 views

PT-2024-15990 · WordPress · Infinite-Scroll

Name of the Vulnerable Software and Affected Versions: Infinite-Scroll plugin for WordPress versions up to, and including, 2.6.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the process ajax edit and process ajax delete functions...

5.3CVSS7.1AI score0.00242EPSS
Exploits0References12
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:0 a.m.7 views

The vulnerability of the process_delete function in the class-DNSMPD.php component of the GDPR/CCPA Cookie Consent plugin for WordPress’ content management system allows a hacker to perform a CSRF attack.

The vulnerability of the processdelete function in the class-DNSMPD.php component of the GDPR/CCPA Cookie Consent plugin for WordPress content management systems is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to execute a CSRF...

5CVSS6.3AI score0.00204EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/03/02 12:0 a.m.4 views

WordPress Plugin Complianz Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

4.3CVSS8.6AI score0.00204EPSS
Exploits0References3
Rows per page
Query Builder