32 matches found
CVE-2024-32699 WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare.This issue affects YITH WooCommerce Compare: from n/a through = 2.37.0...
CVE-2024-32699 WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare.This issue affects YITH WooCommerce Compare: from n/a through = 2.37.0...
PT-2024-24785 · Yith · Yith Woocommerce Compare
Name of the Vulnerable Software and Affected Versions: YITH WooCommerce Compare versions 2.37.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
WordPress plugin YITH WooCommerce Compare 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin YITH...
WordPress YITH WooCommerce Compare plugin <= 2.37.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin YITH WooCommerce Compare versions = 2.37.0...
WordPress YITH WooCommerce Compare Plugin <= 2.37.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software YITH WooCommerce Compare Type Plugin Vulnerable versions = 2.37.0 Fixed in 2.38.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32699 Patch priority Low CVSS severity Low 4.3 Developer YITH PSID ed876ca0bb69 Credits Ngô Thiên An ancorn...
PT-2023-31959 · WordPress · Tm Woocommerce Compare & Wishlist
Name of the Vulnerable Software and Affected Versions: TM WooCommerce Compare & Wishlist plugin for WordPress versions up to, and including, 1.1.7 Description: The issue is related to Stored Cross-Site Scripting via the 'tm woo wishlist table' shortcode due to insufficient input sanitization and...
WordPress YITH WooCommerce Compare plugin <=1.3.14 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability
Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Compare plugin versions =1.3.14. Solution Update the WordPress YITH WooCommerce Compare plugin to the latest available version at least 1.3.15...
WordPress YITH WooCommerce Compare plugin <=2.3.14 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability
Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Compare plugin versions =2.3.14. Solution Update the WordPress YITH WooCommerce Compare plugin to the latest available version at least 2.3.15...
WordPress YITH WooCommerce Compare 2.0.9 PHP Object Injection Vulnerability
WordPress YITH WooCommerce Compare plugin version 2.0.9 suffers from a PHP object injection vulnerability. ------------------------------------------------------------------------ YITH WooCommerce Compare WordPress Plugin unauthenticated PHP Object injection vulnerability...
YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object injection
The YITH WooCommerce Compare WordPress plugin was affected by an Unauthenticated PHP Object injection security vulnerability...
WordPress YITH WooCommerce Compare 2.0.9 PHP Object Injection
------------------------------------------------------------------------ YITH WooCommerce Compare WordPress Plugin unauthenticated PHP Object injection vulnerability ------------------------------------------------------------------------ Yorick Koster, June 2016...