Lucene search
K

6 matches found

NVD
NVD
added 2025/02/28 5:15 a.m.7 views

CVE-2025-0801

The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API...

4.3CVSS0.001EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/02/28 4:21 a.m.5 views

CVE-2025-0801 RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update

The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API...

4.3CVSS4.3AI score0.001EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/28 4:21 a.m.12 views

CVE-2025-0801 RateMyAgent Official <= 1.4.0 - Cross-Site Request Forgery to API Key Update

The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API...

4.3CVSS0.001EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/02/28 12:0 a.m.1 views

WordPress plugin RateMyAgent Official 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS7.6AI score0.001EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/02/28 12:0 a.m.2 views

PT-2025-9054 · WordPress · Ratemyagent Official

Name of the Vulnerable Software and Affected Versions: RateMyAgent Official plugin for WordPress versions up to and including 1.4.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This allows unauthenticate...

4.3CVSS9.3AI score0.001EPSS
Exploits0References9
Patchstack
Patchstack
added 2025/02/27 11:20 p.m.3 views

WordPress RateMyAgent Official plugin <= 1.4.0 - Cross-Site Request Forgery to API Key Update vulnerability

Cross-Site Request Forgery to API Key Update vulnerability discovered by Dhabaleshwar Das in WordPress Plugin RateMyAgent Official versions = 1.4.0...

4.3CVSS7AI score0.001EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder