11 matches found
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
CVE-2023-32587
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
PT-2023-23891 · WordPress · Wp Reactions Lite
Name of the Vulnerable Software and Affected Versions: WP Reactions Lite plugin versions 1.3.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Reactions Lite plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WP...
CVE-2023-32587: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...
WordPress WP Reactions Lite plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Reactions Lite plugin prior to 1.3.6. The vulnerability stems from a failure to properly clean up input on the wp-admin...
CVE-2021-24723
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...
CVE-2021-24723
CVE-2021-24723 concerns the WordPress WP Reactions Lite plugin prior to 1.3.6, where input sanitization failures in wp-admin pages allow an authenticated user to inject XSS payloads. The vulnerability is described as an authenticated stored XSS with access limited to sufficient privileges for edi...
CVE-2021-24723: Improper Neutralization of Input During Web Page Generation
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...
PT-2021-16226
Name of the Vulnerable Software and Affected Versions WP Reactions Lite WordPress plugin versions prior to 1.3.6 Description The issue allows users with sufficient access to inject XSS payloads within /wp-admin/ pages due to improper input sanitization within wp-admin pages. Recommendations For W...