3 matches found
Cross site request forgery (csrf)
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS...
4.3CVSS6.4AI score0.00459EPSS
SaveExploits0References1Affected Software1
Cross site request forgery (csrf)
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
4.3CVSS7.3AI score0.01096EPSS
SaveExploits1References3Affected Software1
CVE-2014-9392
Cross-site request forgery CSRF vulnerability in the PictoBrowser pictobrowser-gallery plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the pictoBrowserFlickrUser parameter ...
6.8CVSS6.4AI score0.01001EPSS
SaveExploits2References1
20