CVE-2023-26011

Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...

CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the readmoreexcerptlinkmenuoptions function. This makes it possible for unauthenticated attackers t...

CVE-2025-0810 Read More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion

The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.7. This is due to missing or incorrect nonce validation on the addNewButtons function. This makes it possible for unauthenticated attackers to include and execute...

WordPress plugin Read More & Accordion 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

CVE-2024-13639

The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access...

WordPress plugin Read More & Accordion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin Read More & Accordion versio...

PT-2025-6589 · WordPress · Read More & Accordion

Name of the Vulnerable Software and Affected Versions: Read More & Accordion plugin for WordPress versions up to, and including, 3.4.2 Description: The issue is related to a missing capability check on the expmDeleteData function, which allows authenticated attackers with Subscriber-level access...

WordPress Read More & Accordion plugin <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary 'Read More' Post Deletion vulnerability discovered by theviper17y in WordPress Plugin Read More & Accordion versions = 3.4.2...

CVE-2025-25148

Cross-Site Request Forgery CSRF vulnerability in ElbowRobo Read More Copy Link read-more-copy-link allows Stored XSS.This issue affects Read More Copy Link: from n/a through = 1.0.2...

CVE-2025-25148

Cross-Site Request Forgery CSRF vulnerability in ElbowRobo Read More Copy Link read-more-copy-link allows Stored XSS.This issue affects Read More Copy Link: from n/a through = 1.0.2...

WordPress plugin Read More Copy Link 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

WordPress Read More Copy Link plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Read More Copy Link versions = 1.0.2...

WordPress Read more By Adam plugin <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Read More Button Deletion vulnerability discovered by Francesco Carlucci in WordPress Plugin Read more By Adam versions = 1.1.8...

WordPress Read more By Adam Plugin <= 1.1.8 is vulnerable to Broken Access Control

Software Read more By Adam Type Plugin Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9187 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bad5d062abf4 Credits Francesco Carlucci Required...

CVE-2024-9187

The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete read...

CVE-2024-9187

CVE-2024-9187 – WordPress Read more By Adam plugin : The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the deleteRm() function in all versions up to and including 1.1.8. This allows authenticated attackers with Subscriber-le...

PT-2024-39477 · WordPress · Read More By Adam

Name of the Vulnerable Software and Affected Versions: Read more By Adam plugin for WordPress versions up to, and including, 1.1.8 Description: The issue is related to a missing capability check on the deleteRm function, allowing authenticated attackers with Subscriber-level access and above to...

CVE-2024-5260

The Sina Extension for Elementor Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘readmoretext’ parameter in all versions up to, and including, 3.5.5 due to insufficient...

CVE-2024-5260

The Sina Extension for Elementor Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘readmoretext’ parameter in all versions up to, and including, 3.5.5 due to insufficient...

WordPress Sina Extension for Elementor plugin <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via readmoretext Parameter vulnerability discovered by stealthcopter in WordPress Plugin Sina Extension for Elementor versions = 3.5.5...