CVE-2023-42246

creationtimestamp| type| source ---|---|--- 2025-01-13 22:11:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113823335037954990 2025-01-13 22:16:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnrash5wj2s 2025-01-13 22:38:14+00:00| seen|...

CVE-2024-11764

creationtimestamp| type| source ---|---|--- 2025-01-07 06:46:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113785725693099056 2025-01-07 07:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5442xe5q22 2025-01-07 07:15:56+00:00| seen|...

CVE-2024-45541

creationtimestamp| type| source ---|---|--- 2025-01-06 11:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113781107577795529 2025-01-06 11:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z26ki7d25 2025-01-06 11:28:03+00:00| seen|...

CVE-2024-53833

creationtimestamp| type| source ---|---|--- 2025-01-03 03:38:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113762339358720452 2025-01-03 04:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesq5v7fz425 2025-01-03 04:42:46+00:00| seen|...

CVE-2024-51653

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653 WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653 WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653

CVE-2024-51653 documents a CSRF to Stored XSS vulnerability in the WordPress plugin UPDATE NOTIFICATIONS affecting versions

PT-2024-34797 · Unknown · Mario Spinaci Update Notifications

Name of the Vulnerable Software and Affected Versions: Mario Spinaci UPDATE NOTIFICATIONS versions 0.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the...

CVE-2024-51653: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

WordPress plugin UPDATE NOTIFICATIONS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin UPDATE NOTIFICATIONS versions = 0.3.4...

WordPress UPDATE NOTIFICATIONS Plugin <= 0.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software UPDATE NOTIFICATIONS Type Plugin Vulnerable versions = 0.3.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51653 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0600c62df7fe Credits SOPROBRO Require...

FormCraft < 1.2.8 - Missing Authorization via formcraft_nag_update

Description The FormCraft plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the formcraftnagupdate AJAX nopriv function in versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to delay or disable upda...

CVE-2023-34029

Cross-Site Request Forgery CSRF vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin = 2.3.3 versions...

CVE-2023-34029

Cross-Site Request Forgery CSRF vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin = 2.3.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin = 2.3.3 versions...

CVE-2023-34029 WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin = 2.3.3 versions...

CVE-2023-34029

CVE-2023-34029 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Disable WordPress Update Notifications and auto-update Email Notifications, affecting versions

PT-2023-24644 · WordPress · Prem Tiwari Disable Wordpress Update Notifications/Auto-Update Email Notifications

Name of the Vulnerable Software and Affected Versions: Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin versions = 2.3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing...