CVE-2024-54331

CVE-2024-54331 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “I Plant A Tree” that enables a Stored Cross-Site Scripting (XSS) condition. Affected versions are listed as from n/a through 1.7.3. The connected Red Hat and Wordfence sources confirm this vulnerab...

CVE-2024-54331 WordPress I Plant A Tree plugin <= 1.7.3 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Micha I Plant A Tree i-plant-a-tree allows Stored XSS.This issue affects I Plant A Tree: from n/a through = 1.7.3...

CVE-2024-54355

CVE-2024-54355 is a CSRF vulnerability in WP Mailster (brand t) affecting WP Mailster versions up to 1.8.17.0. Connected Red Hat entry repeats the CSRF description. Patch status in Wordfence shows Patch Status: Patched; Published: 2024-12-11. Technical details on exact exploit specifics or affect...

CVE-2024-54352 WordPress Sogrid plugin <= 1.5.2 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sabri Sogrid sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through = 1.5.2...

CVE-2024-54356 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in vCita.com Online Booking & Scheduling Calendar for WordPress by vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5...

CVE-2024-54356

CVE-2024-54356 is a Cross-Site Request Forgery (CSRF) vulnerability in the vcita Online Booking & Scheduling Calendar for WordPress plugin, affecting versions up to 4.5. Root cause described as CSRF; impact and remediation details are not provided in the connected documents beyond noting the affe...

CVE-2024-54372 WordPress Insertify plugin <= 1.1.4 - CSRF to Remote Code Execution vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Insertify insertify allows Code Injection.This issue affects Insertify: from n/a through = 1.1.4...

CVE-2024-54372

CVE-2024-54372 is a CSRF-to-Remote Code Execution vulnerability in Insertify

CVE-2024-54372 WordPress Insertify plugin <= 1.1.4 - CSRF to Remote Code Execution vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Insertify allows Code Injection.This issue affects Insertify: from n/a through 1.1.4...

CVE-2024-56005

CVE-2024-56005 is a CSRF-type vulnerability affecting Posti Shipping (WordPress plugin) up to version 3.10.3. The issue allows cross-site request forgery to change plugin settings. If exploited, an attacker could trigger settings changes without authentication or user interaction. The CVE has a C...

CVE-2024-56005 WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through = 3.10.3...

CVE-2024-54332 WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through = 1.2.0...

CVE-2024-54353

CVE-2024-54353 is a CSRF-to-Stored XSS issue in the WordPress Hack-Info plugin (Hack-Info), affecting versions up to 3.17. The vulnerability’s description confirms Cross-Site Forgery to Stored Cross-Site Scripting. Red Hat and ENISA records corroborate the CVE entry; Wordfence notes the vulnerabi...

CVE-2024-54332

CVE-2024-54332 describes a Cross-Site Request Forgery (CSRF) vulnerability in WP Currency Exchange Rates that enables Stored XSS in WP Currency Exchange Rates versions up to 1.2.0. The issue affects the WordPress plugin WP Currency Exchange Rates (affected range:

CVE-2024-54332 WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPFactory WP Currency Exchange Rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through 1.2.0...

CVE-2024-54353 WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through = 3.17...

CVE-2024-54386

CVE-2024-54386 corresponds to a CSRF-to-Stored-XSS issue in Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart (Push Monkey Pro plugin). Affected product/version: Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart (up through 3.9). Document describes Cros...

CVE-2024-54386 WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart:...

CVE-2024-54386 WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart:...

CVE-2024-54389 WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eduardo Chiaro addWeather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through 2.5.1...