Lucene search
K

6 matches found

EUVD
EUVD
added 2025/11/13 12:31 p.m.3 views

EUVD-2025-163777

Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...

6.5CVSS6.3AI score0.00014EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/13 10:34 a.m.5 views

WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika in WordPress Plugin WP Plugin Manager versions = 1.4.7...

6.5CVSS6.7AI score0.00014EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.3 views

CVE-2023-1088

The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS7.8AI score0.00106EPSS
Exploits2References1
OSV
OSV
added 2023/03/27 4:15 p.m.0 views

CVE-2023-1088

The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS6.6AI score
Exploits0References1
CNNVD
CNNVD
added 2023/03/27 12:0 a.m.3 views

WordPress plugin WP Plugin Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.2AI score0.00106EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.2 views

PT-2023-16743 · WordPress · Wp Plugin Manager

Name of the Vulnerable Software and Affected Versions: WP Plugin Manager versions prior to 1.1.8 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins present on the blog via a CSRF attack...

4.3CVSS8.8AI score0.00106EPSS
Exploits2References4
Rows per page
Query Builder