Lucene search
+L

1865 matches found

NVD
NVD
added 2023/05/28 6:15 p.m.24 views

CVE-2023-33931

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/28 6:15 p.m.13 views

CVE-2023-33931

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/28 6:15 p.m.23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/28 5:14 p.m.29 views

CVE-2023-33931 WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/28 5:14 p.m.54 views

CVE-2023-33931

CVE-2023-33931: Cross-Site Request Forgery in the YouTube Playlist Player WordPress plugin (≤ 4.6.4). Root cause: CSRF in the plugin enables unauthorized actions; impact variants described in public sources. Affected: YouTube Playlist Player plugin for WordPress. Remediation: update to 4.6.5 or l...

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/28 5:14 p.m.11 views

CVE-2023-33931 WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ciprian Popescu YouTube Playlist Player plugin = 4.6.4 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/28 12:00 a.m.6 views

WordPress plugin YouTube Playlist Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.1AI score0.00256EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/05/23 12:00 a.m.15 views

WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software YouTube Playlist Player Type Plugin Vulnerable versions = 4.6.4 Fixed in 4.6.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33931 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07d0f46aa846 Credits Skalucy...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2Affected Software1
Schneier on Security
Schneier on Security
added 2023/05/22 11:15 a.m.17 views

Google Is Not Deleting Old YouTube Videos

Google has backtracked on its plan to delete inactive YouTube videos--at least for now. Of course, it could change its mind anytime it wants. It would be nice if this would get people to think about the vulnerabilities inherent in letting a for-profit monopoly decide what of human creativity is...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/05/22 11:15 a.m.10 views

CVE-2023-23797

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/22 11:15 a.m.28 views

CVE-2023-23797

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

8.8CVSS6.5AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/22 10:00 a.m.61 views

CVE-2023-23797

CVE-2023-23797 affects SecondLineThemes’ WordPress plugin Auto YouTube Importer (versions

8.8CVSS7.2AI score0.00264EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/22 10:00 a.m.9 views

CVE-2023-23797 WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

5.4CVSS8.8AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/22 10:00 a.m.30 views

CVE-2023-23797 WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SecondLineThemes Auto YouTube Importer plugin = 1.0.3 versions...

5.4CVSS9AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/22 12:00 a.m.9 views

WordPress plugin Auto YouTube Importer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/22 12:00 a.m.13 views

PT-2023-19212 · Secondlinethemes · Auto Youtube Importer

Name of the Vulnerable Software and Affected Versions: SecondLineThemes Auto YouTube Importer plugin versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.3AI score0.00264EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2023/05/17 8:46 p.m.155 views

Exploit for Cross-site Scripting in Cpanel

!logohttps://raw.githubusercontent.com/mr-sami-x/XSS1915/mai...

6.1CVSS5.6AI score0.65533EPSS
SaveExploits7
Malwarebytes
Malwarebytes
added 2023/05/12 7:15 p.m.19 views

YouTube is testing ad blocker detection

YouTube is dipping a toe into the muddy waters of ad-blocker blocking, with ad-blocker using Redditors complaining about a popup that warns "Ad blockers are not allowed on YouTube," when they visit the site. Image source: Reddit user Sazk100 The popup message explains that "Ads allow YouTube to...

6.7AI score
SaveExploits0
hivepro
hivepro
added 2023/05/10 12:03 p.m.20 views

New AndoryuBot Malware Exploits Ruckus Wireless Flaw for DDoS Attacks

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary AndoryuBot targets critical Ruckus Wireless Admin panel vulnerability to infect Wi-Fi access points for use in DDoS attacks, malware supports 12 DDoS attack modes and is marketed through YouTube videos. ...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/05/04 8:15 p.m.9 views

CVE-2023-25982

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Eirudo Simple YouTube Responsive plugin = 2.5 versions...

5.4CVSS6.7AI score0.00361EPSS
SaveExploits0References1
Rows per page
Query Builder