Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WebDorado WDSocialWidgets plugin = 1.0.15 versions...

CVE-2023-47669

CVE-2023-47669 is a CSRF vulnerability in the WordPress plugin “User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor” by Cozmoslabs, affecting versions prior to 3.10.3. The issue allows cross-site request forgery without authentication (per Patchstack/CVE rec...

CVE-2023-46618 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2023-48063

Dreamer CMS 4.1.3 is affected by a CSRF vulnerability that can delete a theme project via /admin/category/delete. The connected sources consistently describe this CSRF issue but do not provide exploitation steps, specific exploitability, or remediation details. Practical impact is the potential d...

PT-2023-30123 · WordPress · Daext Autolinks Manager

Name of the Vulnerable Software and Affected Versions: DAEXT Autolinks Manager plugin versions = 1.10.04 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-24850 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: WP Hide Post plugin versions = 2.0.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...

PT-2023-24218 · WordPress · Stop Referrer Spam

Name of the Vulnerable Software and Affected Versions: Krzysztof Wielogórski Stop Referrer Spam plugin versions prior to 1.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-29842 · Lionscripts.Com · Lionscripts.Com Webmaster Tools

Name of the Vulnerable Software and Affected Versions: LionScripts.Com Webmaster Tools versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

Word Balloon < 4.20.3 - Avatar Removal via CSRF

Description The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to trick a logged in user to delete arbitrary avatars by clicking a link. Make a logged in admin open...

PT-2023-23892 · Unknown · Brandbrilliance Post State Tags

Name of the Vulnerable Software and Affected Versions: BRANDbrilliance Post State Tags plugin versions 2.0.6 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

CVE-2023-26524

The CVE-2023-26524 entry concerns a CSRF vulnerability in the WordPress plugin Quiz And Survey Master (ExpressTech) , affecting versions up to 8.0.10 . The issue exposes a risk to unauthenticated users that could impact integrity, confidentiality, and availability as indicated by CVSS metrics (NV...

CVE-2023-28420

Cross-Site Request Forgery CSRF vulnerability in Leo Caseiro Custom Options Plus plugin = 1.8.1 versions...

CVE-2023-28173

CVE-2023-28173 describes a Cross-Site Request Forgery (CSRF) in the Google XML Sitemap for Images WordPress plugin, affected versions ≤ 2.1.3. The issue is unauthenticated, enabling CSRF actions on sites where a user is logged in. Public disclosures in PatchStack/Red Hat/NVD entries confirm the v...

CVE-2023-28694

Cross-Site Request Forgery CSRF vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin = 3.5.0 versions...

CVE-2023-28498

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tribulant Slideshow Gallery LITE plugin = 1.7.6 versions...

CVE-2023-29238

CVE-2023-29238 is a CSRF vulnerability in the WordPress plugin Whydonate – FREE Donate button (wp-whydonate) affecting versions

CVE-2023-29238 WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin = 3.12.15 versions...

PT-2023-20697 · Accesspress Themes · Accesspress Themes Wp Tfeed Plugin

Name of the Vulnerable Software and Affected Versions: AccessPress Themes WP TFeed plugin versions = 1.6.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

PT-2023-22252 · Plainware.Com · Shiftcontroller Employee Shift Scheduling

Name of the Vulnerable Software and Affected Versions: plainware.Com ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...