Lucene search
+L

841 matches found

CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•7 views

WordPress Plugin Simple Testimonials Showcase Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•1 views

CVE-2023-48283: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

8.8CVSS7.8AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•14 views

PT-2023-30758 · Unknown · Simple Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: Simple Testimonials Showcase versions 1.1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.1.5 and earlier, update to a version...

8.8CVSS8.9AI score0.00247EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2023/11/23 12:00 a.m.•21 views

WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48283 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 964d38648042 Credits Nguyen...

8.8CVSS7AI score0.00247EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/23 12:00 a.m.•20 views

Social proof testimonials and reviews by Repuso < 5.00 - Missing Authorization

Description The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks on several functions hooked via AJAX actions in versions up to, and including, 4.97. This makes it possible for authenticated attacker...

6.5AI score0.00416EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/01 12:00 a.m.•13 views

The vulnerability of the Aajoda Testimonials plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aajoda Testimonials plugin for WordPress content management systems is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

4.8CVSS6.3AI score0.00773EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2023/10/20 5:15 a.m.•32 views

CVE-2023-5613

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00448EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/20 5:15 a.m.•14 views

CVE-2023-5613

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS7AI score0.00448EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/20 5:15 a.m.•26 views

Cross site scripting

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

4.9CVSS5.2AI score0.00448EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/20 12:00 a.m.•1 views

CVE-2023-5613: Improper Neutralization of Input During Web Page Generation

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00448EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•13 views

PT-2023-32214

Name of the Vulnerable Software and Affected Versions The Super Testimonials plugin for WordPress versions up to, and including, 2.9 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS5.5AI score0.00448EPSS
SaveExploits0References9
OSV
OSV
•added 2023/10/12 1:15 p.m.•16 views

CVE-2023-45048

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

8.8CVSS5.8AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/12 12:16 p.m.•77 views

CVE-2023-45048

CVE-2023-45048 is a CSRF vulnerability in the Repuso Social proof testimonials and reviews by Repuso plugin, affected in versions

8.8CVSS7.1AI score0.00208EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•2 views

CVE-2023-45048: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

8.8CVSS7.8AI score0.00208EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•16 views

WordPress plugin Social proof testimonials and reviews by Repuso Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Social proof...

8.8CVSS6.7AI score0.00208EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/10/12 12:00 a.m.•17 views

Social Proof Testimonials and Reviews by Repuso < 5.02 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.5AI score0.00208EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/10/03 12:15 p.m.•12 views

CVE-2023-2830

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

8.8CVSS5.8AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/03 12:15 p.m.•22 views

CVE-2023-2830

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

8.8CVSS6.5AI score0.00263EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/03 12:15 p.m.•20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

6.8CVSS8.7AI score0.00263EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/03 11:22 a.m.•10 views

CVE-2023-2830 WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

5.4CVSS7.1AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder