CVE-2023-39165 WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fetch Designs Sign-up Sheets plugin = 2.2.8 versions...

CVE-2023-39165

CVE-2023-39165 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the Fetch Designs Sign-up Sheets WordPress plugin, affecting versions

CVE-2023-37998

Cross-Site Request Forgery CSRF vulnerability in Saas Disabler allows Cross Site Request Forgery.This issue affects Disabler: from n/a through 3.0.3...

CVE-2023-38381

Cross-Site Request Forgery CSRF vulnerability in Cyle Conoly WP-FlyBox plugin = 6.46 versions...

PT-2023-26819 · Fetch Designs · Fetch Designs Sign-Up Sheets Plugin

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets plugin versions = 2.2.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

WordPress Plugin Sign-up Sheets Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2023-44477

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Boxy Studio Cooked plugin = 1.7.13 versions...

CVE-2023-41800

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...

CVE-2023-5329 Field Logic DataCube4 Web API improper authentication

A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...

PT-2023-28077 · Wpgens · Swifty Bar

Name of the Vulnerable Software and Affected Versions: Swifty Bar, sticky bar by WPGens plugin versions = 1.2.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This allows for malicious scripts to be stored on th...

CVE-2023-41687

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Irina Sokolovskaya Goods Catalog plugin = 2.4.1 versions...

CVE-2023-5135

The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2023-41860

Unauth. Cross-Site Scripting XSS vulnerability in TravelMap plugin = 1.0.1 versions...

CVE-2023-41237

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose Pro theme = 1.0.8 versions...

CVE-2023-30472

Unauth. Reflected Cross-Site Scripting XSS vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin = 1.0.17 versions...

PT-2023-31941 · Unknown · Himitzh Hoj

Name of the Vulnerable Software and Affected Versions: HimitZH HOJ versions up to 4.6-9a65e3f Description: A critical issue has been found in the Topic Handler component, leading to a sandbox issue. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2023-41949

Auth. admin+ Cross-Site Scripting XSS vulnerability in Avirtum iFolders plugin = 1.5.0 versions...

PT-2023-28709 · Unknown · Szvone Vmqphp

Name of the Vulnerable Software and Affected Versions: szvone vmqphp versions =1.13 Description: The issue allows unauthorized remote users to use SQL injection attacks to obtain the hash of the administrator password. This can be achieved through sql injection attacks, which enable attackers to...

PT-2023-5602 · D Link · D-Link Dar-8000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/changelogo.php file of the D-Link DAR-8000 router's firmware. This vulnerability can be exploited remotel...

CVE-2023-41374

Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of...