EUVD-2022-25225

Malicious code in bioql PyPI...

CVE-2022-1957

The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2022-1957

The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2022-1957

CVE-2022-1957 concerns the WordPress plugin Comment License prior to version 1.4.0. Affected component: the plugin’s settings update flow, which lacks CSRF verification. Root cause: missing CSRF check during settings updates. Impact: could allow an attacker to alter settings by inducing a logged-...

CVE-2022-1957: Cross-Site Request Forgery (CSRF)

The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin Comment License 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Comment License plugin prior to 1.4.0 are vulnerable to cross-site request...

PT-2022-14217

Name of the Vulnerable Software and Affected Versions Comment License WordPress plugin versions prior to 1.4.0 Description The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations For...