Lucene search
K

5 matches found

NVD
NVD
added 2025/05/17 4:16 a.m.7 views

CVE-2025-4194

The AlT Monitoring plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the 'ALTMonitoringedit' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS0.00044EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/17 3:24 a.m.4 views

CVE-2025-4194 AlT Monitoring <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The AlT Monitoring plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the 'ALTMonitoringedit' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6AI score0.00044EPSS
Exploits0References2
CVE
CVE
added 2025/05/17 3:24 a.m.29 views

CVE-2025-4194

CVE-2025-4194 affects the AlT Monitoring WordPress plugin up to version 1.0.3. The vulnerability is a Cross-Site Request Forgery to Stored Cross-Site Scripting caused by missing or incorrect nonce validation on the ALT_Monitoring_edit page, enabling unauthenticated attackers to update settings an...

6.1CVSS6AI score0.00044EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/05/17 12:0 a.m.2 views

PT-2025-21772 · WordPress · Alt Monitoring

Name of the Vulnerable Software and Affected Versions: AlT Monitoring plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'ALT Monitoring edit' page. This allows unauthenticat...

6.1CVSS6.7AI score0.00044EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/05/17 12:0 a.m.2 views

WordPress plugin AlT Monitoring 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.1CVSS6.6AI score0.00044EPSS
Exploits0References4
Rows per page
Query Builder