CVE-2025-23691

Cross-Site Request Forgery CSRF vulnerability in Braulio Aquino Send to Twitter send-to-twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through = 1.7.2...

CVE-2025-23691 WordPress Send to Twitter plugin <= 1.7.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Braulio Aquino García Send to Twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through 1.7.2...

CVE-2025-23691

CVE-2025-23691 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “Send to Twitter” by Braulio Aquino García that permits stored XSS. The entry states the flaw affects the plugin’s version range “from n/a through 1.7.2.” The Red Hat security entry reiterates the C...

CVE-2025-23691 WordPress Send to Twitter plugin <= 1.7.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Braulio Aquino Send to Twitter send-to-twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through = 1.7.2...

WordPress Send to Twitter plugin <= 1.7.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Send to Twitter versions = 1.7.2...

WordPress Send to a Friend Addon plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Send to a Friend Addon versions = 1.4.1...

WordPress plugin Send to Twitter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-23691: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Braulio Aquino Send to Twitter send-to-twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through = 1.7.2...

CVE-2024-5143

A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed...

VulnCheck KEV: CVE-2013-2912

Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepperinprocessrouter.cc in the Pepper Plug-in API PPAPI in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

PT-2024-18090 · WordPress · Wpify Woo Czech

Name of the Vulnerable Software and Affected Versions: WPify Woo Czech plugin versions up to, and including, 4.0.8 Description: The issue allows unauthorized access to data due to a missing capability check on the maybe send to packeta function. This makes it possible for unauthenticated attacker...

DEBIAN-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

CVE-2021-37183: Improper Access Control

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a...

Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account

Amazon has addressed a number of flaws in its Kindle e-reader platform that could have allowed an attacker to take control of victims' devices by simply sending them a malicious e-book. Dubbed "KindleDrip ," the exploit chain takes advantage of a feature called "Send to Kindle" to send a...

taokaenoi.co.th XSS vulnerability

Vulnerable URL: http://www.taokaenoi.co.th/sendtofriend.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 718048 VIP website status:| No Check taokaenoi.co.th SSL connection:|...

realtoractioncenter.com XSS vulnerability

Open Bug Bounty ID: OBB-185408 Description| Value ---|--- Affected Website:| realtoractioncenter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lupusresearch.org XSS vulnerability

Vulnerable URL: http://www.lupusresearch.org/news-and-events/lupus-news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check...

edgewood.org XSS vulnerability

Vulnerable URL: http://www.edgewood.org/news/send-to-friend.jsp?pid=107753966=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=%2Fmuseum%2Fsend-to-friend.jsp%3Fpid%3D455022595%26itemID%3D455058960 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:5...

CVE-2015-4346

Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...

CVE-2015-4346

Cross-site scripting XSS vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews...