62 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
CVE-2022-40687
CVE-2022-40687 affects the WordPress Creative Mail plugin (versions
CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
CVE-2022-40686 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
CVE-2022-40686
CVE-2022-40686 affects the WordPress Creative Mail plugin up to version 1.5.4, describing a Cross-Site Request Forgery (CSRF) vulnerability in authenticated requests. The vulnerability consistency is confirmed across multiple sources (NVD listing and vulnerability databases in OpenVAS/patchstack/...
WordPress plugin Creative Mail 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
WordPress plugin Creative Mail 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Creative Mail 1.5.4 and earlier versions contain a cross-site request forgery vulnerability...
CVE-2022-40687: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
PT-2022-25474 · Unknown · Creative Mail
Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...
CVE-2022-40686: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...
PT-2022-25473 · Unknown · Creative Mail
Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions = 1.5.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...
WordPress plugin Creative Mail 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2022-44740: Cross-Site Request Forgery (CSRF)
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...
PT-2022-27292 · Unknown · Creative Mail
Name of the Vulnerable Software and Affected Versions: Creative Mail plugin versions prior to 1.5.5 Description: The issue concerns Multiple Cross-Site Request Forgery CSRF vulnerabilities. Recommendations: For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...
Creative Mail < 1.6.0 - Settings Reset via CSRF
The plugin does not have CSRF check when resetting its settings, which could allow attackers to make logged in admins perform such action via a CSRF attack...
WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability was discovered by Muhammad Daffa Patchstack Alliance in the WordPress Creative Mail plugin versions = 1.5.4. Solution Update the WordPress Creative Mail plugin to the latest available version at least 1.6.0...
Creative Mail < 1.6.0 - Multiple CSRF
The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as enable disable contact sync, reset the plugin, unlink accounts and update email marketing settings...