7 matches found
EUVD-2023-31881
Malicious code in bioql PyPI...
EUVD-2023-29034
Malicious code in bioql PyPI...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Images plugin = 2.1.3 versions...
CVE-2023-28173
CVE-2023-28173 describes a Cross-Site Request Forgery (CSRF) in the Google XML Sitemap for Images WordPress plugin, affected versions ≤ 2.1.3. The issue is unauthenticated, enabling CSRF actions on sites where a user is logged in. Public disclosures in PatchStack/Red Hat/NVD entries confirm the v...
CVE-2023-23869
CVE-2023-23869 is a CSRF vulnerability in the WordPress Google XML Sitemap for Mobile plugin (≤1.6.1). Public entries document an unauthenticated CSRF issue tied to the plugin, with impact described variably: NVD lists high impact (C/H, I/H, A/H) and overall CVSS v3.1 score of 8.8, while Patchsta...
CVE-2023-25055 WordPress Google XML Sitemap for Videos Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Videos plugin = 2.6.1 versions...
CVE-2023-25055
CVE-2023-25055 is a CSRF vulnerability in the WordPress plugin Google XML Sitemap for Videos (versions <= 2.6.1). The issue stems from cross-site requests made by unauthenticated users to sitemap-related actions (e.g., video_sitemap_generate) that can be triggered through normal user interacti...