WordPress plugin W3SPEEDSTER 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress W3SPEEDSTER plugin <= 7.25 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin W3SPEEDSTER versions = 7.25...

WordPress W3SPEEDSTER Plugin <= 7.25 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3SPEEDSTER Type Plugin Vulnerable versions = 7.25 Fixed in 7.27 OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-52392 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 547b19ebfd17 Credits Le Ngoc Anh Required privilege...

WordPress W3SPEEDSTER plugin <= 7.26 - Authenticated (Administrator+) Remote Code Execution vulnerability

Authenticated Administrator+ Remote Code Execution vulnerability discovered by Lesor101 in WordPress Plugin W3SPEEDSTER versions = 7.26...

CVE-2024-8512

The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization function. This is due to the plugin passing user supplied input to eval. This makes it possible for authenticated...

CVE-2024-8512 W3SPEEDSTER <= 7.26 - Authenticated (Administrator+) Remote Code Execution

The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 via the 'script' parameter of the hookBeforeStartOptimization function. This is due to the plugin passing user supplied input to eval. This makes it possible for authenticated...

CVE-2024-8512

CVE-2024-8512 affects the WordPress plugin W3SPEEDSTER, allowing authenticated attackers with Administrator-level access to achieve remote code execution by using the script parameter in hookBeforeStartOptimization(), since user input is passed to eval(). Affected versions are all up to and inclu...

WordPress W3SPEEDSTER Plugin <= 7.26 is vulnerable to Remote Code Execution (RCE)

Software W3SPEEDSTER Type Plugin Vulnerable versions = 7.26 Fixed in 7.27 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-8512 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID e98a59b3436a Credits Lesor101 Required privilege Administrator...

WordPress plugin W3SPEEDSTER 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-24708

Cross-Site Request Forgery CSRF vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19...

CVE-2024-24708

Cross-Site Request Forgery CSRF vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19...

WordPress Plugin W3SPEEDSTER Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin W3SPEEDSTE...

CVE-2024-24708 WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19...

CVE-2024-24708

CVE-2024-24708 is a CSRF vulnerability in the WordPress plugin W3SPEEDSTER (W3SPEEDSTER WP). Affected versions are

CVE-2024-24708 WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in W3speedster W3SPEEDSTER.This issue affects W3SPEEDSTER: from n/a through 7.19...

PT-2024-20504 · Unknown · W3Speedster

Name of the Vulnerable Software and Affected Versions: W3SPEEDSTER versions prior to 7.20 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions prior to 7.20, update to version 7....

W3SPEEDSTER < 7.20 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF)

Software W3SPEEDSTER Type Plugin Vulnerable versions = 7.19 Fixed in 7.20 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2024-24708 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 75264187b158 Credits Nguyen Xuan Chien...