2525 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Mike Strand Bulk Comment Remove allows Cross Site Request Forgery.This issue affects Bulk Comment Remove: from n/a through 2...
CVE-2023-48330
CVE-2023-48330 – WordPress Bulk Comment Remove CSRF (CSRF) vulnerability . The Bulk Comment Remove plugin (WordPress) is affected for versions <= 2, allowing Cross-Site Request Forgery. Public sources confirm the CVE and link it to unauthenticated CSRF risk with the vulnerable plugin, and Patc...
CVE-2023-48330 WordPress Bulk Comment Remove Plugin <= 2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Mike Strand Bulk Comment Remove allows Cross Site Request Forgery.This issue affects Bulk Comment Remove: from n/a through 2...
WordPress Plugin Bulk Comment Remove Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-30791 · Unknown · Mike Strand Bulk Comment Remove
Name of the Vulnerable Software and Affected Versions: Mike Strand Bulk Comment Remove versions prior to 2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is achieved by tricking the user...
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Description The Bulk Comment Remove plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2. This is due to missing or incorrect nonce validation on the brcadmin function. This makes it possible for unauthenticated attackers to delete comments in bulk...
bulk-system.com Improper Access Control vulnerability OBB-3794762
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Astra Bulk Edit < 1.2.8 - Missing Authorization
Description The Astra Bulk Edit plugin for WordPress is vulnerable to unauthorized missing authorization due to a missing capability check on the savepostbulkedit function in versions up to, and including, 1.2.7. This makes it possible for attackers with contributor-level access or higher to bulk...
WordPress Bulk Comment Remove Plugin <= 2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Bulk Comment Remove Type Plugin Vulnerable versions = 2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48330 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 07bea83de130 Credits Nguyen Xuan Chien...
The vulnerability of the Bulk Price Update plugin for Woocommerce in the WordPress content management system allows attackers to perform cross-site scripting attacks.
The vulnerability of the Bulk Price Update plugin for Woocommerce in the WordPress content management system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Bulkmodification component in NagiosXI software, which stems from the lack of protective measures for the website structure, allows attackers to execute XSS attacks.
The vulnerability of the Bulkmodification component in NagiosXI relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out an XSS attack remotely...
kernel: netfilter: ipset: Rework long task execution when adding/deleting entries
An uncontrolled resource consumption flaw was found in the Linux kernel's netfilter ipset subsystem when processing large batch operations. A local user with CAPNETADMIN capability can trigger this issue by adding or deleting a large number of ipset entries in a single operation, causing the kern...
PT-2023-7772 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.11.3 Description: The issue is related to a SQL injection vulnerability in the bulk modification tool of Nagios XI, which can be exploited by a remote attacker to execute arbitrary SQL code. This is due to the la...
CVE-2023-5821
The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing nonce validation on the deleteselected function. This makes it possible for unauthenticated attackers to delete sliders in bulk via a forged request granted they c...
WordPress Plugin Thumbnail carousel slider Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2023-32354 · WordPress · Thumbnail Carousel Slider Plugin
Name of the Vulnerable Software and Affected Versions: Thumbnail carousel slider plugin for WordPress version 1.0 Description: The issue is due to missing nonce validation on the deleteselected function, making it possible for unauthenticated attackers to delete sliders in bulk via a forged reque...
Information Disclosure
wagtail is vulnerable to Information Disclosure. The vulnerability allows an authenticated admin attacker to obtain the display names of user accounts by making a direct URL request to the admin view that handles bulk actions on user accounts...
Newsletter & Bulk Email Sender <= 2.0.1 - Contributor+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
