CVE-2023-46625 WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in DAEXT Autolinks Manager plugin = 1.10.04 versions...

CVE-2023-46625

CVE-2023-46625 is a CSRF vulnerability in the DAEXT Autolinks Manager WordPress plugin, affecting versions

Autolinks Manager < 1.10.05 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin Autolinks Manager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-30123 · WordPress · Daext Autolinks Manager

Name of the Vulnerable Software and Affected Versions: DAEXT Autolinks Manager plugin versions = 1.10.04 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)

Software Autolinks Manager Type Plugin Vulnerable versions = 1.10.04 Fixed in 1.10.05 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46625 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d40ccdf98f29 Credits Skalucy...

WordPress plugin Autolinks cross-site request forgery vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Autolinks has a cross-site request forgery vulnerability, which can be exploited by remote attackers to perform...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

Cross site scripting

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

CVE-2022-1112

The CVE-2022-1112 entry concerns the WordPress Autolinks plugin (up to version 1.0.1) with a Stored Cross-Site Scripting flaw caused by missing CSRF protection and lack of sanitization/escaping when updating settings. The vulnerability could allow a logged-in administrator to be targeted via a CS...

CVE-2022-1112 Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRF

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

WordPress plugin Autolinks 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Autolinks has a cross-site request forgery vulnerability, which can be exploited by remote attackers to perform...

AutoLinks 2.1 Pro Al_initialize.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14686/info AutoLinks Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

Joomla! ZT Autolinks组件'controller'参数本地文件包含漏洞

Bugtraq ID:56994 Joomla!是一款开放源码的内容管理系统CMS。 Joomla! ZT Autolinks组件不正确过滤用户提交给'controller'参数的数据，允许攻击者利用漏洞通过目录遍历攻击获得系统文件内容。 0 Joomla! ZT Autolinks Component 厂商解决方案 目前没有详细解决方案提供： http://Joomla.org...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782

CVE-2005-2782 affects AutoLinks Pro 2.1 (AutoLinks Pro) via the PHP script al_initialize.php. The vulnerability is a remote file inclusion in the alpath parameter that accepts ftp:// URLs, bypassing a blacklist that only checked for http(s). This allows an attacker to cause arbitrary PHP code exe...

AutoLinks Pro 2.1

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...