CVE-2015-10013

A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomyswitcherinit of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack...

CVE-2015-10013

CVE-2015-10013 affects the WebDevStudios taxonomy-switcher Plugin for WordPress up to version 1.0.3. The vulnerability stems from the function taxonomy_switcher_init in the file taxonomy-switcher.php, enabling cross-site scripting and allowing a remote attacker to exploit it. The issue is address...

CVE-2015-10013 WebDevStudios taxonomy-switcher Plugin taxonomy-switcher.php taxonomy_switcher_init cross site scripting

A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomyswitcherinit of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack...

Taxonomy Switcher 跨站脚本漏洞

Taxonomy Switcher is a taxonomy that switches terms by a specific parent of another taxonomy. A cross-site scripting vulnerability exists in Taxonomy Switcher versions prior to 1.0.4, which stems from a problem with the function taxonomyswitcherinit in the file taxonomy-switcher.php, which can le...

PT-2023-10192 · Webdevstudios · Taxonomy-Switcher Plugin

Name of the Vulnerable Software and Affected Versions: WebDevStudios taxonomy-switcher Plugin versions up to 1.0.3 Description: A problematic issue was found in the WebDevStudios taxonomy-switcher Plugin, affecting the taxonomy switcher init function of the file taxonomy-switcher.php. This issue...

CVE-2022-3419

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator...

CVE-2022-3419 Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation

The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator...

WordPress plugin Automatic User Roles Switcher 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in the WordPress...

WordPress Automatic User Roles Switcher premium plugin <= 1.1.1 - Auth. Privilege Escalation vulnerability

Auth. Privilege Escalation vulnerability discovered by WPScan in WordPress Automatic User Roles Switcher premium plugin versions = 1.1.1. Solution Update the WordPress Automatic User Roles Switcher plugin to the latest available version at least 1.1.2...

CVE-2022-40219

Cross-Site Request Forgery CSRF vulnerability in SedLex FavIcon Switcher plugin = 1.2.11 at WordPress allows plugin settings change...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in SedLex FavIcon Switcher plugin = 1.2.11 at WordPress allows plugin settings change...

CVE-2022-40219 WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SedLex FavIcon Switcher plugin = 1.2.11 at WordPress allows plugin settings change...

CVE-2022-40219 WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SedLex FavIcon Switcher plugin = 1.2.11 at WordPress allows plugin settings change...

CVE-2022-40219

CVE-2022-40219 affects the WordPress FavIcon Switcher plugin, {

WordPress plugin SedLex FavIcon Switcher 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability was discovered by Lana Codes Patchstack Alliance in the WordPress FavIcon Switcher plugin versions = 1.2.11. Solution Deactivate and delete. This plugin has been closed as of September 19, 2022 and is not available for download. This closure is...

PT-2022-25290 · Sedlex · Sedlex Favicon Switcher Plugin

Name of the Vulnerable Software and Affected Versions: SedLex FavIcon Switcher plugin versions 1.2.11 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows changes to plugin settings. This type of vulnerability enables an attacker to perfor...

CVE-2022-2575

The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2022-2575

The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2022-2575

The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...