CVE-2023-45606

CVE-2023-45606 is a CSRF vulnerability in the WordPress plugin Simple URLs (Link Cloaking, etc.) for versions up to 120. The issue enables Cross-Site Request Forgery without authentication, potentially allowing attackers to trigger unwanted actions on behalf of logged-in users. Public details fro...

CVE-2023-45606 WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

PT-2023-29587

Name of the Vulnerable Software and Affected Versions Lasso Simple URLs plugin versions = 1.20 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

WordPress Plugin Simple URLs - Link Cloaking, Product Displays, and Affiliate Link Management Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Simple URLs - Link Cloakin...

CVE-2023-45606: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple URLs Type Plugin Vulnerable versions = 120 Fixed in 121 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45606 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d8dcb8acc03a Credits Mika Required privilege...

The vulnerability of the Simple URLs plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Simple URLs plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

CVE-2023-40667

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667 WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667 WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CVE-2023-40667

CVE-2023-40667: Unauthenticated Reflected Cross-Site Scripting in WordPress Simple URLs plugin affecting versions

WordPress plugin Simple URLs - Link Cloaking, Product Displays, and Affiliate Link Management Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-40667: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

Simple URLs < 118 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2023-27587 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs plugin versions = 117 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user da...

Exploit for CVE-2023-0099

CVE-2023-0099-exploit Exploit Title: simple urls 4. kno...

WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)

Software Simple URLs Type Plugin Vulnerable versions = 117 Fixed in 118 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40667 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc177aa51fb0 Credits Rafshanzani Suhada Requir...

WordPress Simple URLs Plugin <= 117 is vulnerable to Broken Access Control

Software Simple URLs Type Plugin Vulnerable versions = 117 Fixed in 118 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40678 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c3242183ab51 Credits Rafshanzani Suhada Required privilege...

WordPress Simple URLs Plugin <= 118 is vulnerable to Cross Site Scripting (XSS)

Software Simple URLs Type Plugin Vulnerable versions = 118 Fixed in 119 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40674 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 69f63671ea42 Credits Rafshanzani Suhada Required...