Lucene search
+L

62 matches found

Prion
Prion
•added 2022/11/18 7:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00757EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/11/18 7:15 p.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00287EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/18 6:47 p.m.•12 views

CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.1AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/18 6:47 p.m.•82 views

CVE-2022-40687

CVE-2022-40687 affects the WordPress Creative Mail plugin (versions

8.8CVSS7AI score0.00757EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/18 6:47 p.m.•46 views

CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.1AI score0.00757EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/11/18 6:38 p.m.•14 views

CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.1AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/11/18 6:38 p.m.•41 views

CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.1AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/18 6:38 p.m.•77 views

CVE-2022-40686

CVE-2022-40686 affects the WordPress Creative Mail plugin up to version 1.5.4, describing a Cross-Site Request Forgery (CSRF) vulnerability in authenticated requests. The vulnerability consistency is confirmed across multiple sources (NVD listing and vulnerability databases in OpenVAS/patchstack/...

8.8CVSS7.1AI score0.00287EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•20 views

WordPress plugin Creative Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.7AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•36 views

WordPress plugin Creative Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Creative Mail 1.5.4 and earlier versions contain a cross-site request forgery vulnerability...

8.8CVSS6.6AI score0.00757EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/18 12:00 a.m.•2 views

CVE-2022-40687: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00757EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•15 views

PT-2022-25474 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...

8.8CVSS8.6AI score0.00757EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/18 12:00 a.m.•2 views

CVE-2022-40686: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•21 views

PT-2022-25473 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...

8.8CVSS8.5AI score0.00287EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•22 views

WordPress plugin Creative Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS7.7AI score0.00306EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/18 12:00 a.m.•3 views

CVE-2022-44740: Cross-Site Request Forgery (CSRF)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•20 views

PT-2022-27292 · Unknown · Creative Mail

Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions prior to 1.5.5 Description: The issue concerns Multiple Cross-Site Request Forgery CSRF vulnerabilities. Recommendations: For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...

8.8CVSS8.8AI score0.00306EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2022/10/28 12:00 a.m.•26 views

Creative Mail < 1.6.0 - Settings Reset via CSRF

The plugin does not have CSRF check when resetting its settings, which could allow attackers to make logged in admins perform such action via a CSRF attack...

8.8CVSS4.7AI score0.00757EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2022/10/28 12:00 a.m.•35 views

WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability was discovered by Muhammad Daffa Patchstack Alliance in the WordPress Creative Mail plugin versions = 1.5.4. Solution Update the WordPress Creative Mail plugin to the latest available version at least 1.6.0...

8.8CVSS4.3AI score0.00287EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2022/10/28 12:00 a.m.•34 views

Creative Mail < 1.6.0 - Multiple CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as enable disable contact sync, reset the plugin, unlink accounts and update email marketing settings...

8.8CVSS4.2AI score0.00306EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder