CVE-2023-49842

CVE-2023-49842 affects the WordPress plugin Rocket Maintenance Mode & Coming Soon Page (versions n/a–4.3). Root cause: Improper Neutralization of Input During Web Page Generation, enabling a Stored XSS vulnerability. Impact is stored XSS against site visitors; exploit requires administrator input...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2...

CVE-2022-47181

CVE-2022-47181 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin “Email Templates Customizer and Designer for WordPress and WooCommerce” (Email Templates). Affected versions are up to 1.4.2. The issue allows CSRF exploitation without authentication, with network attack vector ...