12 matches found
EUVD-2023-51664
Malicious code in bioql PyPI...
CVE-2023-47553
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
UserHeat Plugin <= 1.1.6 - Cross-Site Request Forgery
Description The UserHeat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.6. This is due to missing or incorrect nonce validation on the settingPage function. This makes it possible for unauthenticated attackers to modify the plugin's...
CVE-2023-47553
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
CVE-2023-47553
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...
CVE-2023-47553
CVE-2023-47553 : CSRF in the WordPress UserHeat Plugin (affecting versions up to 1.1.6). The issue allows unauthorized actions via forged requests and has a fixed version of 1.1.11. No exploitation details are provided in the supplied documents; remediation is to upgrade to 1.1.11 or apply the ve...
WordPress Plugin UserHeat Plugin Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-30504 · Unknown · Userheat Plugin
Name of the Vulnerable Software and Affected Versions: UserHeat Plugin versions 1.1.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that t...
WordPress UserHeat Plugin Plugin < 1.1.11 is vulnerable to Cross Site Request Forgery (CSRF)
Software UserHeat Plugin Type Plugin Vulnerable versions 1.1.11 Fixed in 1.1.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47553 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3bac4cc0a295 Credits LEE SE HYOUNG...