11960 matches found
CVE-2023-35913
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
CVE-2023-35913
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
CVE-2023-35913 WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
CVE-2023-35913
CVE-2023-35913 concerns the WordPress plugin OOPSpam Anti-Spam (versions
CVE-2023-35913
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
CVE-2023-35913 WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
WordPress Plugin OOPSpam Anti-Spam 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin OOPSpam...
PT-2023-25378 · Unknown · Oopspam Anti-Spam
Name of the Vulnerable Software and Affected Versions: OOPSpam OOPSpam Anti-Spam plugin versions = 1.1.44 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
CVE-2023-35913: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in OOPSpam OOPSpam Anti-Spam plugin = 1.1.44 versions...
Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of spam can be so overwhelming that finding useful information within it becomes quite challenging. What exacerbates this issue is that spam can populate your public pages, appearing in comments an...
Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of spam can be so overwhelming that finding useful information within it becomes quite challenging. What exacerbates this issue is that spam can populate your public pages, appearing in comments an...
MSC-2023-14333
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
MSC-2023-12570
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)
Software OOPSpam Anti-Spam Type Plugin Vulnerable versions = 1.1.44 Fixed in 1.1.45 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-35913 Patch priority Low CVSS severity Low 4.3 Developer OOPSpam LLC PSID 2dfc3bd6e459 Credits Skalucy Required...
GHSA-CVM3-PP2J-CHR3 Grafana has Broken Access Control in Alert manager: Viewer can send test alerts
Summary Grafana allows an attacker in the Viewer role, send alerts by API Alert - Test. The option is not available from the user panel UI for in the Viewer role. Reason for the error: The API does not check access to this function and allows it by users with the least rights, for example, the...
Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants
Banking and financial services organizations are the targets of a new multi-stage adversary-in-the-middle AitM phishing and business email compromise BEC attack, Microsoft has revealed. "The attack originated from a compromised trusted vendor and transitioned into a series of AiTM attacks and...
SUSE CVE-2023-2183
Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access t...
CVE-2023-2187
On Triangle MicroWorks' SCADA Data Gateway version = v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a "password change event"...