CVE-2024-53761

Cross-Site Request Forgery CSRF vulnerability in P Roy WP Revisions Manager wp-revisions-manager allows Cross Site Request Forgery.This issue affects WP Revisions Manager: from n/a through = 1.0.2...

CVE-2024-53761 WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in P. Roy WP Revisions Manager allows Cross Site Request Forgery.This issue affects WP Revisions Manager: from n/a through 1.0.2...

CVE-2024-53761 WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in P Roy WP Revisions Manager wp-revisions-manager allows Cross Site Request Forgery.This issue affects WP Revisions Manager: from n/a through = 1.0.2...

CVE-2024-53761

CVE-2024-53761 is a CSRF vulnerability affecting WP Revisions Manager

WordPress plugin WP Revisions Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-35872 · WordPress · P. Roy Wp Revisions Manager

Name of the Vulnerable Software and Affected Versions: P. Roy WP Revisions Manager versions 1.0.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user into performing...

WordPress WP Revisions Manager plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin WP Revisions Manager versions = 1.0.2...

PT-2024-10578 · Qualcomm · Snapdragon +26

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs on certain hardware revisions where VP9 decoding is hardware-accelerated. In these cases, the frame size is not correctly programmed in...

Fedora 40 : microcode_ctl (2024-d20a106350)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d20a106350 advisory. - Update to upstream 2.1-47. 20241112 - Update of 06-8f-04/0x87 SPR-SP E0/S1 microcode in intel-ucode/06-8f-05 from revision 0x2b0005c0 up to...

CVE-2024-11154 PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.15 via the 'actAjaxRevisionDiffs' function. This makes it possible for authenticated attackers,...

CVE-2024-11154

CVE-2024-11154 affects PublishPress Revisions (WordPress) up to version 3.5.15, enabling authenticated users with Subscriber-level access and higher to exfiltrate sensitive post/page revisions via actAjaxRevisionDiffs. A patch exists; upgrade to a version higher than 3.5.15 (≥3.5.16) or apply ven...

CVE-2024-11154 PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.15 via the 'actAjaxRevisionDiffs' function. This makes it possible for authenticated attackers,...

WordPress PublishPress Revisions plugin <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Dominik Dziura Domons in WordPress Plugin PublishPress Revisions versions = 3.5.15...

WordPress plugin PublishPress Revisions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16791 · WordPress · Publishpress Revisions

Name of the Vulnerable Software and Affected Versions: PublishPress Revisions plugin versions up to, and including, 3.5.15 Description: The issue allows authenticated attackers with Subscriber-level access and above to extract sensitive data, including revisions of posts and pages, via the...

WordPress PublishPress Revisions Plugin <= 3.5.15 is vulnerable to Broken Access Control

Software PublishPress Revisions Type Plugin Vulnerable versions = 3.5.15 Fixed in 3.5.16 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-11154 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7cabf4dddfbf Credits Dominik Dziura Domon...

Fedora 41 : microcode_ctl (2024-28ea86c8aa)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-28ea86c8aa advisory. - Update to upstream 2.1-47. 20241112 - Update of 06-8f-04/0x87 SPR-SP E0/S1 microcode in intel-ucode/06-8f-05 from revision 0x2b0005c0 up to...

Fedora 41 : microcode_ctl (2024-d6726b5d75)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d6726b5d75 advisory. - Update to upstream 2.1-45. 20240910 - Update of 06-97-02/0x07 ADL-HX/S 8+8 C0 microcode from revision 0x35 up to 0x36; - Update of 06-97-05/0x07...

Fedora 41 : microcode_ctl (2024-67a38b081a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-67a38b081a advisory. - Update to upstream 2.1-44. 20240813 - Update of 06-55-07/0xbf CLX-SP/W/X B1/L1 microcode from revision 0x5003605 up to 0x5003707; - Update of...

CVE-2024-9436

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.5.14. This makes it possible...