WordPress Tourfic plugin <= 2.14.5 - Missing Authorization in Multiple Functions vulnerability

Missing Authorization in Multiple Functions vulnerability discovered by WordFence in WordPress Plugin Tourfic versions = 2.14.5...

GHSA-GP69-XCM6-FFQJ Web2py Cross-Site Request Forgery vulnerability

Web2py versions 2.14.5 and below was affected by CSRF Cross Site Request Forgery vulnerability, which allows an attacker to trick a logged-in administrator into performing unwanted actions i.e An attacker can trick a victim into disable the installed application just by visiting a URL...

PT-2017-8533

Name of the Vulnerable Software and Affected Versions Web2py versions 2.14.5 and below Description The issue allows an attacker to perform a Reflected XSS attack on a logged-in user, specifically those with admin privileges. Recommendations For Web2py versions 2.14.5 and below, at the moment, the...