3387 matches found
CVE-2025-1362
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362: Cross-Site Request Forgery (CSRF)
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
PT-2025-10433
Name of the Vulnerable Software and Affected Versions The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin versions 9.0.2 and earlier Description The issue concerns a lack of CSRF checks in some bulk actions of the plugin, which could allow attackers to make logged-...
Linux Distros Unpatched Vulnerability : CVE-2024-46828
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track o...
PT-2025-16735
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the PCI: brcmstb component. The issue occurs when the regulator bulk get function returns an error and no regulators are...
SUSE CVE-2025-21708
In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports 1 encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below. For now, enable...
CVE-2025-27311
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...
Drupal 11.0.x < 11.0.12 Multiple Vulnerabilities
According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability XSS. - Bulk operations allow...
CVE-2025-27311
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...
WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bulk Content Creator versions = 1.2.1...
CVE-2025-27311 WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...
CVE-2025-27311
CVE-2025-27311 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Bulk Content Creator. Affected versions are 1.2.1 and earlier; the issue is active in those releases, per the available data. The CVE details indicate an impact on integrity/availability is not appl...
CVE-2025-27311 WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...
PT-2025-7738 · Unknown · Bulk Content Creator
Name of the Vulnerable Software and Affected Versions: Bulk Content Creator versions 1.2.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions 1.2.1 and earlier, update to a version that includes a fi...
CVE-2025-27311: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...
WordPress plugin Bulk Content Creator 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...
DRUPAL-CORE-2025-002
Bulk operations allow authorized users to modify several nodes at once from the Content page /admin/content. A site builder can also add bulk operations to other pages using Views. A bug in the core Actions system allows some users to modify some fields using bulk actions that they do not have...