WordPress Plugin Nudgify Social Proof, Sales Popup & FOMO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Nudgify Social Proof, Sale...

Nudgify Social Proof, Sales Popup & FOMO < 1.3.4 - Cross-Site Request Forgery via sync_orders_manually()

Description The Nudgify Social Proof, Sales Popup & FOMO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the syncordersmanually function. This makes it possible for unauthenticated...

WordPress Nudgify Social Proof, Sales Popup & FOMO plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Nudgify Social Proof, Sales Popup & FOMO versions = 1.3.3...

Social proof testimonials and reviews by Repuso < 5.00 - Missing Authorization

Description The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks on several functions hooked via AJAX actions in versions up to, and including, 4.97. This makes it possible for authenticated attacker...

CVE-2023-45048

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

CVE-2023-45048 WordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

CVE-2023-45048

CVE-2023-45048 is a CSRF vulnerability in the Repuso Social proof testimonials and reviews by Repuso plugin, affected in versions

WordPress plugin Social proof testimonials and reviews by Repuso Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Social proof...

Social Proof Testimonials and Reviews by Repuso < 5.02 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress WiserNotify Social Proof Plugin <= 2.5 is vulnerable to Broken Access Control

Software WiserNotify Social Proof Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41690 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b6fca210e91a Credits Abdi Pranata Required...

CVE-2023-24389

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in brandiD Social Proof Testimonial Slider plugin = 2.2.3 versions...

CVE-2023-24389

CVE-2023-24389 is a stored cross-site scripting vulnerability in the brandiD Social Proof (Testimonial) Slider WordPress plugin, affecting versions

CVE-2023-24389 WordPress Social Proof (Testimonial) Slider Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in brandiD Social Proof Testimonial Slider plugin = 2.2.3 versions...

WordPress plugin Social Proof (Testimonial) Slider Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Social Proof (Testimonial) Slider Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Social Proof Testimonial Slider Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24389 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c3586b08bf5f Credits yuyudhn...

WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin versions = 1.0.1. Solution No patched version available...

WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin versions = 1.0.1. Solution No patched version available...

Freelance Website Script 2.0.6 - 'pr_id' / 'catid' SQL Injection

Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...