CVE-2023-38390

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CVE-2023-38390

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CVE-2023-38390

CVE-2023-38390 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Anshul Labs Mobile Address Bar Changer (versions ≤ 3.0). The issue arises from CSRF in the plugin’s settings update flow, allowing an unauthenticated attacker to induce a user to perform unintended actions...

WordPress Plugin mobile-address-bar-changer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-26399 · Anshul · Anshul Labs Mobile Address Bar Changer

Name of the Vulnerable Software and Affected Versions: Anshul Labs Mobile Address Bar Changer plugin versions = 3.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-41737

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

CVE-2023-41847

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41737

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

CVE-2023-41847

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41847

CVE-2023-41847 affects the WordPress plugin Notice Bar (WEN Solutions) with versions

CVE-2023-41847 WordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WEN Solutions Notice Bar plugin = 3.1.0 versions...

CVE-2023-41737

CVE-2023-41737 : WordPress plugin Swifty Bar (WPGens) vulnerable to Stored XSS when using versions

CVE-2023-41737 WordPress Swifty Bar, sticky bar by WPGens Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin = 1.2.10 versions...

PT-2023-28077 · Wpgens · Swifty Bar

Name of the Vulnerable Software and Affected Versions: Swifty Bar, sticky bar by WPGens plugin versions = 1.2.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This allows for malicious scripts to be stored on th...

WordPress Plugin Notice Bar Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Swifty Bar, sticky bar by WPGens < 1.2.11 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Plugin Swifty Bar, sticky bar by WPGens Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Swifty Bar, sticky bar by...

Minor update (5) for Vivaldi Desktop Browser 6.2

Download Vivaldi The following improvements were made since the fourth 6.2 minor update: Address bar Can be blank/empty VB-99745 Chromium Upgraded to 116.0.5845.230: CVE-2023-5217 CrashSpatial Navigation Crash while reloading a page VB-100012 CrashWorkspaces Closing window with an open workspace...

Siemens InsydeH2O Improper Input Validation (CVE-2023-27373)

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM. Insyde BIOS is typically used in RUGGEDCOM APE products and some SIMATIC...