12 matches found
EUVD-2022-24899
Malicious code in bioql PyPI...
CVE-2022-1610
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
WordPress Seamless Donations plugin跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Seamless Donations plugin versions prior to 5.1.9 are vulnerable to cross-site request...
CVE-2022-1610
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1610
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1610
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
Cross site request forgery (csrf)
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1610 Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2022-1610
CVE-2022-1610 affects the WordPress plugin Seamless Donations (versions before 5.1.9). The root cause is a missing CSRF check when updating settings, which could let a logged-in attacker perform a CSRF attack to change settings. Public references (NVD, RH, CNVD, CVE lists) corroborate the vulnera...
WordPress plugin Seamless Donations 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Seamless Donations plugin versions prior to 5.1.9 are vulnerable to cross-site request...
WordPress Seamless Donations plugin <= 5.1.8 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress Seamless Donations plugin versions = 5.1.8. Solution Update the WordPress Seamless Donations plugin to the latest available version at least 5.1.9...
Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit; Some link: https://google.com input type="text" name="dgxdonateemailanon" value="You have requested th...