13 matches found
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
CVE-2023-32587 WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
WordPress Plugin WP Reactions Lite Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2023-23891 · WordPress · Wp Reactions Lite
Name of the Vulnerable Software and Affected Versions: WP Reactions Lite plugin versions 1.3.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Reactions Lite plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WP...
WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Reactions Lite Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32587 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b436a9de7ad3 Credits István Márton...
WordPress WP Reactions Lite plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Reactions Lite plugin prior to 1.3.6. The vulnerability stems from a failure to properly clean up input on the wp-admin...
CVE-2021-24723
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...
Design/Logic Flaw
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...
CVE-2021-24723
CVE-2021-24723 concerns the WordPress WP Reactions Lite plugin prior to 1.3.6, where input sanitization failures in wp-admin pages allow an authenticated user to inject XSS payloads. The vulnerability is described as an authenticated stored XSS with access limited to sufficient privileges for edi...
WordPress 跨站脚本漏洞
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Reactions Lite plugin prior to 1.3.6. The vulnerability stems from a failure to properly clean up input on the wp-admin...