Lucene search
+L

6 matches found

CNVD
CNVD
•added 2022/06/30 12:00 a.m.•31 views

WordPress WP Post Styling plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Post Styling plugin version prior to 1.3.1 is vulnerable to cross-site request forgery,...

4.3CVSS2.1AI score0.00429EPSS
SaveExploits2References1
NVD
NVD
•added 2022/06/27 9:15 a.m.•23 views

CVE-2022-1845

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks...

4.3CVSS0.00429EPSS
SaveExploits2References1
OSV
OSV
•added 2022/06/27 9:15 a.m.•10 views

CVE-2022-1845

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks...

4.3CVSS5.8AI score0.00429EPSS
SaveExploits2References1
CVE
CVE
•added 2022/06/27 8:57 a.m.•86 views

CVE-2022-1845

The CVE-2022-1845 entry concerns the WordPress WP Post Styling plugin (version

4.3CVSS4.5AI score0.00429EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/06/27 8:57 a.m.•28 views

CVE-2022-1845 WP Post Styling < 1.3.1 - Multiple CSRF

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks...

5AI score0.00429EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•2 views

CVE-2022-1845: Cross-Site Request Forgery (CSRF)

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks...

4.3CVSS5.6AI score0.00429EPSS
SaveExploits2References2
Rows per page
Query Builder