CVE-2024-31385

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31374

Cross-Site Request Forgery CSRF vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0...

CVE-2024-31383 WordPress PopularFX theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pagelayer PopularFX.This issue affects PopularFX: from n/a through 1.2.4...

CVE-2024-31428 WordPress The Conference theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rara Theme The Conference.This issue affects The Conference: from n/a through 1.2.0...

CVE-2024-31933

Technical details for CVE-2024-31933 are not publicly provided in the supplied documents; monitor for updates from vendors and advisories.

CVE-2024-32435

Cross-Site Request Forgery CSRF vulnerability in perrinalexandre05 AffiEasy affieasy.This issue affects AffiEasy: from n/a through = 1.1.4...

CVE-2024-32101

Cross-Site Request Forgery CSRF vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend omnisend-connect.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through = 1.14.3...

CVE-2024-32093

Cross-Site Request Forgery CSRF vulnerability in Nose Graze Novelist.This issue affects Novelist: from n/a through 1.2.2...

CVE-2024-32439

Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports.This issue affects WP Client Reports: from n/a through 1.0.22...

CVE-2024-32440

Cross-Site Request Forgery CSRF vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.8.0...

CVE-2024-32436 WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Codemenschen Gift Vouchers.This issue affects Gift Vouchers: from n/a through 4.4.0...

CVE-2024-2858

The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2857

The Simple Buttons Creator WordPress plugin through 1.04 does not have any authorisation as well as CSRF in its add button function, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them...

CVE-2024-1755

The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2739

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-2739 Advance Search <= 1.1.6 - Shortcode Deletion via CSRF

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

PT-2024-24285 · Unknown · Anton Aleksandrov Wordpress Hosting Benchmark Tool

Name of the Vulnerable Software and Affected Versions: Anton Aleksandrov WordPress Hosting Benchmark tool versions 1.3.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in the Anton Aleksandrov WordPress Hosting Benchmark tool. This type of vulnerability allo...

WordPress Plugin NPS computy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-24069

Name of the Vulnerable Software and Affected Versions Rara Theme The Conference versions 1.2.0 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicatio...

PT-2024-24399 · Churchthemes · Church Content – Sermons

Name of the Vulnerable Software and Affected Versions: Church Content – Sermons, Events and More versions through 2.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in ChurchThemes Church Content – Sermons, Events and More. This vulnerability can be exploited due to...