44 matches found
CVE-2024-30543
CVE-2024-30543 is an authorization bypass via a user-controlled key in the UPQODE Whizz/Whizzy WordPress plugin, affecting versions from n/a to 1.1.18. The CVSS 3.1 base score is 6.5 (Network attack, Low attack complexity, Privileges Required: None, User Interaction: None, Confidentiality/Integri...
CVE-2024-30543 WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18...
CVE-2024-30543: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18...
CVE-2017-8099
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...
Cross site request forgery (csrf)
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...
CVE-2017-8099
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...
CVE-2017-8099
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...
CVE-2017-8099
CVE-2017-8099 affects the WHIZZ WordPress plugin prior to version 1.1.1. The connected documents describe a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker delete WordPress users and change the plugin’s status via a GET request. Exploitation details beyond this behavior are ...
CVE-2017-8099: Cross-Site Request Forgery (CSRF)
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...
PT-2017-18114
Name of the Vulnerable Software and Affected Versions WHIZZ plugin versions prior to 1.1.1 for WordPress Description The issue allows attackers to perform actions such as deleting any WordPress users and changing the plugin's status via a GET request. This is due to a CSRF issue in the plugin...
WordPress WHIZZ Cross Site Request Forgery
Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1 changelog-Specifically Best regards, Zhiyang Zeng of Tencent security...
WordPress WHIZZ plugin <=1.1 - Cross-Site Request Forgery vulnerability
WordPress WHIZZ plugin version 1.1 and earlier versions vulnerable to Cross-Site Request Forgery type attacks. An attacker could exploit this vulnerability to delete any WordPress user and change any plugin status. Solution Update WordPress WHIZZ plugin to the latest available version at least...
WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery
WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery ====== Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1...
WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery
====== Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1 changelog-Specifically...
WHIZZ <= 1.1 - Cross-Site Request Forgery (CSRF)
The WHIZZ WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
Wordpress whizz plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. whizz is one of the plug-ins used in the back-end management of WordPress and add a color-coded interface . A...
CVE-2016-1000154
Reflected XSS in wordpress plugin whizz v1.0.7...
Cross site scripting
Reflected XSS in wordpress plugin whizz v1.0.7...