2500 matches found
CVE-2023-44475
Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...
CVE-2023-44994 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...
CVE-2023-44994
CVE-2023-44994 is a CSRF vulnerability in the WordPress ShortCodes UI plugin (Bainternet ShortCodes UI) affecting versions
CVE-2023-44994 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...
CVE-2023-44475
CVE-2023-44475 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Add Shortcodes Actions And Filters, affecting versions 2.0.9, specifically 2.10 or later. If patching is not possible, monitor for vendor advisories and apply mitigations once available.
CVE-2023-44475 WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...
CVE-2023-5467
The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-5467
The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-44994: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...
PT-2023-29337 · WordPress · Bainternet Shortcodes Ui
Name of the Vulnerable Software and Affected Versions: Bainternet ShortCodes UI plugin versions 1.9.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...
WordPress Plugin ShortCodes UI Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2023-44475: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...
CVE-2023-5467: Improper Neutralization of Input During Web Page Generation
The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...
CVE-2023-5357: Improper Neutralization of Input During Web Page Generation
The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)
Software ShortCodes UI Type Plugin Vulnerable versions = 1.9.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44994 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 381936b7d175 Credits Mika Required privilege...
WordPress Plugin The Post Grid - Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin The Post Grid - Shortcode,...
CVE-2023-41728
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...