CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9...

CVE-2024-54408

CVE-2024-54408 affects Youmax Channel Embeds for YouTube Businesses (Youtube Video Grid) via Cross-Site Request Forgery. Public details show a CSRF vulnerability caused by incorrectly configured access control, enabling settings changes via CSRF for Youtube Video Grid: from n/a through

CVE-2024-54410 WordPress SOPA Blackout plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in eagerterrier SOPA Blackout sopa-blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through = 1.4...

CVE-2024-54410

CVE-2024-54410 describes a CSRF vulnerability in SOPA Blackout that allows Stored XSS. Affected: SOPA Blackout (version range n/a–1.4). CVSS 3.1: 7.1 (HIGH); Vector: Network; Privileges: None; User Interaction: Required; Scope: Changed; Impacts: Confidentiality LOW, Integrity LOW, Availability LO...

CVE-2024-54410 WordPress SOPA Blackout plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in eagerterrier SOPA Blackout sopa-blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through = 1.4...

CVE-2024-54409 WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fzmaster @ XPD XPD Reduce Image Filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through 1.0...

CVE-2024-54409 WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fzmaster XPD Reduce Image Filesize xpd-reduce-image-filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through = 1.0...

CVE-2024-54409

CVE-2024-54409 is a CSRF vulnerability in the WordPress plugin XPD Reduce Image Filesize (also noted as XPD XPD Reduce Image Filesize) that enables a Stored XSS when exploited. The initial record lists affected versions as from n/a through 1.0, with a CVSSv3.1 base score of 7.1 (HIGH) , attack ve...

CVE-2024-54411 WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in hosting.io, campaigns.io WP Controller allows Stored XSS.This issue affects WP Controller: from n/a through 3.2.0...

CVE-2024-54411

CVE-2024-54411 involves WP Controller (WordPress plugin) with a CSRF to Stored XSS vulnerability affecting WP Controller versions up to 3.2.0. Connected sources (Red Hat, Wordfence) corroborate the CSRF-to-Stored-XSS description and indicate the patch status as Unpatched; no public exploit detail...

CVE-2024-54411 WordPress WP Controller plugin <= 3.2.0 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in hosting.io WP Controller wp-management-controller allows Stored XSS.This issue affects WP Controller: from n/a through = 3.2.0...

CVE-2024-54413

CVE-2024-54413 affects Display Future Posts (WordPress). The issue is a CSRF vulnerability that enables Stored XSS in the plugin. Affected versions are from n/a up to 0.2.3; remediation is to upgrade to a version later than 0.2.3. CVSS 3.1: 7.1 (HIGH), network, UI Required, confidentiality/integr...

CVE-2024-54413 WordPress Display Future Posts plugin <= 0.2.3 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Brandt Display Future Posts allows Stored XSS.This issue affects Display Future Posts: from n/a through 0.2.3...

CVE-2024-54414

CVE-2024-54414 refers to a Cross-Site Forgery to Stored Cross-Site Scripting issue in the WordPress plugin Geoportail Shortcode . Connected records indicate affected versions are up to 2.4.4, with the root cause described as CSRF enabling stored XSS. The Red Hat entry and ENISA/Wordfence aggregat...

CVE-2024-54414 WordPress Geoportail Shortcode plugin <= 2.4.4 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in geoWP Geoportail Shortcode geoportail-shortcode allows Stored XSS.This issue affects Geoportail Shortcode: from n/a through = 2.4.4...

CVE-2024-54414 WordPress Geoportail Shortcode plugin <= 2.4.4 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in geoWP Geoportail Shortcode geoportail-shortcode allows Stored XSS.This issue affects Geoportail Shortcode: from n/a through = 2.4.4...

CVE-2024-54416 WordPress Wp Login with Ajax plugin <= 0.6 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Navdeep Kumar Wp Login with Ajax allows Stored XSS.This issue affects Wp Login with Ajax: from n/a through 0.6...

CVE-2024-54421 WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sanjay Singh Negi Floating Video Player allows Stored XSS.This issue affects Floating Video Player: from n/a through 1.0...

CVE-2024-54420

CVE-2024-54420 documents confirm a CSRF vulnerability in the WordPress plugin Metrika (Aleksander Novikov) that can enable a stored Cross‑Site Scripting (XSS) condition. Affected software is listed as Metrika up to version 1.2 . The connected sources explicitly describe the issue type and affecte...

CVE-2024-54420 WordPress Metrika plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Novikov Metrika metrika allows Cross Site Request Forgery.This issue affects Metrika: from n/a through = 1.2...