PT-2024-24579 · Unknown · Restropress

Name of the Vulnerable Software and Affected Versions: RestroPress versions 3.1.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent. Recommendations: For...

WordPress Plugin RestroPress has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin RestroPress A cross-site...

CVE-2024-32449: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MagniGenie RestroPress.This issue affects RestroPress: from n/a through 3.1.2...

WordPress RestroPress plugin <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin RestroPress versions = 3.1.2...

WordPress RestroPress Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software RestroPress Type Plugin Vulnerable versions = 3.1.2 Fixed in 3.1.2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32449 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4c93742d7852 Credits Steven Julian Require...

RestroPress < 2.8.3.1 - Unauthorised AJAX Calls

The plugin did not check for CSRF as well as capability in some of its AJAX calls which should only be accessible by admin. As a result, any authenticated user can change arbitrary order status, as well as access arbitrary order details including PII such as phone number and address PoC Change th...

RestroPress < 2.8.3 - Cart Manipulation via CSRF

The plugin does not properly check for CSRF in some of its AJAX calls, allowing attackers to make users do unwanted actions, such as add arbitrary products to their cart, or empty it completely To clear the cart of the current user authenticated or not:...

RestroPress < 2.8.3 - Cart Manipulation via CSRF

The plugin does not properly check for CSRF in some of its AJAX calls, allowing attackers to make users do unwanted actions, such as add arbitrary products to their cart, or empty it completely PoC To clear the cart of the current user authenticated or not:...