WordPress plugin AutomatorWP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-19341 · WordPress · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP plugin versions = 2.5.0 Description: A Cross-Site Request Forgery CSRF issue allows for object deletion. Recommendations: For AutomatorWP plugin versions = 2.5.0, update to a version greater than 2.5.0 to resolve the issue...

WordPress AutomatorWP Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software AutomatorWP Type Plugin Vulnerable versions = 2.5.8 Fixed in 2.5.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9242727313b9 Credits Unknown Required privilege...

WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software AutomatorWP Type Plugin Vulnerable versions = 2.5.0 Fixed in 2.5.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23992 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4bad9d54c955 Credits Rafshanzani Suhada...

CVE-2021-24717

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions...

CVE-2021-24717

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions...

Design/Logic Flaw

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions...

CVE-2021-24717 AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions...

CVE-2021-24717

The CVE-2021-24717 entry concerns the AutomatorWP WordPress plugin pre-1.7.6, where missing authorization checks allow Subscriber-role users to enumerate automations, disclose private post titles or user emails, call functions, or perform privilege escalation via Ajax actions. Root cause: lack of...

WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress Plugins, which stems from The AutomatorWP WordPress plugin does no...

AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation

The plugin does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions. Attack Procedures 1 Run this in Dashboard while logged in as Subscribe...

WordPress AutomatorWP plugin <= 1.7.5 - Missing Authorization and Privilege Escalation vulnerability

Missing Authorization and Privilege Escalation vulnerability discovered by apple502j in WordPress AutomatorWP plugin versions = 1.7.5. Solution Update the WordPress AutomatorWP plugin to the latest available version at least 1.7.6...