EUVD-2020-24192

Malware in sbrugna...

CVE-2020-36751

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

CVE-2020-36751

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

CVE-2020-36751

The CVE describes a CSRF vulnerability in the WordPress Coupon Creator plugin (up to version 3.1) caused by missing or incorrect nonce validation in the save_meta() function. This allows unauthenticated attackers to save meta fields by persuading an administrator to perform an action (e.g., click...

CVE-2020-36751 Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

CVE-2020-36751 Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

WordPress Plugin Coupon Creator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Coupon Creator plugin <= 3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Coupon Creator plugin versions = 3.1. Solution Update the WordPress Coupon Creator plugin to the latest available version at least 3.1.1...