CVE-2025-14540

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...

CVE-2025-14540 Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...

WordPress Userback plugin <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) plugin's Configuration Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ plugin's Configuration Exposure vulnerability discovered by jsonc in WordPress Plugin Userback versions = 1.0.15...

EUVD-2023-50350

Malicious code in bioql PyPI...

CVE-2023-46089

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089 WordPress Userback Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lee Le @ Userback Userback plugin = 1.0.13 versions...

CVE-2023-46089

CVE-2023-46089 denotes a CSRF vulnerability in the WordPress Userback plugin, affected versions

PT-2023-29838 · Userback · Userback

Name of the Vulnerable Software and Affected Versions: Userback plugin versions 1.0.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...