CVE-2026-85132: Missing Authorization

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured...

EUVD-2024-43291

Malicious code in bioql PyPI...

CVE-2024-49220

Cross-Site Request Forgery CSRF vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects Cookie Scanner: from n/a through = 1.1...

CVE-2024-49220

Cross-Site Request Forgery CSRF vulnerability in Cookie Scanner – Nikel Schubert Cookie Scanner allows Stored XSS.This issue affects Cookie Scanner: from n/a through 1.1...

CVE-2024-49220

Cross-Site Request Forgery CSRF vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects Cookie Scanner: from n/a through = 1.1...

CVE-2024-49220 WordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects Cookie Scanner: from n/a through = 1.1...

CVE-2024-49220 WordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects Cookie Scanner: from n/a through = 1.1...

CVE-2024-49220

CVE-2024-49220 is a CSRF-to-Stored XSS vulnerability in the WordPress Cookie Scanner plugin (versions

CVE-2024-49220: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nikel Cookie Scanner cookie-scanner allows Cross Site Request Forgery.This issue affects Cookie Scanner: from n/a through = 1.1...

WordPress plugin Cookie Scanner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-33357 · Unknown · Cookie Scanner

Name of the Vulnerable Software and Affected Versions: Cookie Scanner versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in Cookie Scanner. This means an attacker can perform unintended actions on a user's account without...

WordPress Cookie Scanner plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Cookie Scanner versions = 1.1...

WordPress Cookie Scanner Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Cookie Scanner Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49220 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 18da6e2fb5aa Credits SOPROBRO Required...