Lucene search
K

4 matches found

Vulnrichment
Vulnrichment
added 2024/12/12 3:23 a.m.11 views

CVE-2024-11417 dejure.org Vernetzungsfunktion <= 1.97.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The dejure.org Vernetzungsfunktion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.97.5. This is due to missing or incorrect nonce validation on the djoeinstellungenmenue function. This makes it possible for unauthenticated attackers to...

6.1CVSS6.5AI score0.00555EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/12/12 12:33 a.m.3 views

WordPress dejure.org Vernetzungsfunktion plugin <= 1.97.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin dejure.org Vernetzungsfunktion versions = 1.97.5...

6.1CVSS5.9AI score0.00555EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/12 12:0 a.m.3 views

PT-2024-16975 · WordPress · Vernetzungsfunktion

Name of the Vulnerable Software and Affected Versions: Vernetzungsfunktion plugin for WordPress versions up to, and including, 1.97.5 Description: The issue is related to Cross-Site Request Forgery. It is caused by missing or incorrect nonce validation on the djo einstellungen menue function. Thi...

6.1CVSS7.1AI score0.00555EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.2 views

WordPress plugin dejure.org Vernetzungsfunktion 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

6.1CVSS8.5AI score0.00555EPSS
Exploits0References2
Rows per page
Query Builder