19060 matches found
PT-2025-2504
Name of the Vulnerable Software and Affected Versions: BuddyBoss Theme versions prior to 2.4.62 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in BuddyBoss Theme, which allows an attacker to perform unauthorized actions on behalf of a user. Recommendations: For versions...
PT-2025-2521
Name of the Vulnerable Software and Affected Versions: Magazine3 Google Adsense & Banner Ads by AdsforWP versions 1.9.28 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be...
PT-2025-2527
Name of the Vulnerable Software and Affected Versions: Freelancelot Oceanic versions 1.0.0 through 1.0.48 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...
PT-2025-2506
Name of the Vulnerable Software and Affected Versions: Rara Business versions 1.2.5 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This can lead to security breaches where an attacker tricks...
PT-2025-2503 · Unknown · Nitesh Singh Ultimate Auction
Name of the Vulnerable Software and Affected Versions: Nitesh Singh Ultimate Auction versions through 4.2.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...
PT-2025-2489
Name of the Vulnerable Software and Affected Versions: ExtendThemes Highlight versions 1.0.29 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.0.29 a...
PT-2025-2525
Name of the Vulnerable Software and Affected Versions: Themes4WP Popularis Verse versions 1.1.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This can lead to security breaches without the...
PT-2025-2482
Name of the Vulnerable Software and Affected Versions: Rara Theme Perfect Portfolio versions 1.2.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved b...
PT-2025-2502
Name of the Vulnerable Software and Affected Versions: Leaky Paywall versions through 4.21.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows unauthorized actions to be performed on a user's account without their knowledge or consent. This is due to Leaky...
PT-2025-2520
Name of the Vulnerable Software and Affected Versions: VolThemes Patricia Blog versions 1.2 and earlier Description: A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions to be performed on behalf of a user. This issue affects VolThemes Patricia Blog, enabling Cross-Site...
PT-2025-2457 · Unknown · Masterstudy Lms
Name of the Vulnerable Software and Affected Versions: MasterStudy LMS versions prior to 3.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks...
PT-2025-2495
Name of the Vulnerable Software and Affected Versions: Rife Free versions through 2.4.18 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions through 2.4.18, update to a version...
PT-2025-2483 · Uncanny Owl · Uncanny Toolkit For Learndash
Name of the Vulnerable Software and Affected Versions: Uncanny Toolkit Pro for LearnDash versions prior to 4.1.4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows unauthorized actions to be performed on behalf of a user. This can lead to various security...
PT-2025-15666
Name of the Vulnerable Software and Affected Versions NATS-Server versions 2.2.0 through 2.10.27 NATS-Server versions prior to 2.11.1 Description The issue is related to the absence of access controls for the JetStream API in NATS-Server, allowing any user with JS management permissions in any...
PT-2024-36757
Name of the Vulnerable Software and Affected Versions CodeBard Help Desk versions n/a through 1.1.1 Description A Cross-Site Request Forgery CSRF issue exists in CodeBard Help Desk, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited by tricking a user...
PT-2024-36761
Name of the Vulnerable Software and Affected Versions Royal Elementor Addons versions 1.7.1001 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious...
CVE-2024-10044
A Server-Side Request Forgery SSRF vulnerability exists in the POST /workergeneratestream API endpoint of the Controller API Server in lm-sys/fastchat, as of commit e208d5677c6837d590b81cb03847c0b9de100765. This vulnerability allows attackers to exploit the victim controller API server's...
CVE-2024-10044 SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat
A Server-Side Request Forgery SSRF vulnerability exists in the POST /workergeneratestream API endpoint of the Controller API Server in lm-sys/fastchat, as of commit e208d5677c6837d590b81cb03847c0b9de100765. This vulnerability allows attackers to exploit the victim controller API server's...
FastChat code-related vulnerabilities
FastChat is LMSYS Org's is an open platform for training, deploying, and evaluating chatbots based on large language models. A code issue vulnerability exists in FastChat that stems from a server-side request forgery vulnerability in the POST/workergeneratestream API endpoint that allows an...