CVE-2022-2233

The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabcadminslidespostback function found in the /admin/admin.php file. This makes it possible for unauthenticated attackers to inje...

PT-2022-15368 · WordPress · Banner Cycler

Name of the Vulnerable Software and Affected Versions: Banner Cycler plugin for WordPress versions up to and including 1.4 Description: The issue is related to Cross-Site Request Forgery due to missing nonce protection on the pabc admin slides postback function in the /admin/admin.php file. This...

CVE-2022-27346

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...