10422 matches found
CVE-2023-34169
CVE-2023-34169: CSRF vulnerability in TS Webfonts for さくらのレンタルサーバ WordPress plugin, affected versions
CVE-2023-34181
Cross-Site Request Forgery CSRF vulnerability in WP-Cirrus plugin = 0.6.11 versions...
CVE-2023-34371
Cross-Site Request Forgery CSRF vulnerability in Didier Sampaolo SpamReferrerBlock plugin = 2.22 versions...
CVE-2023-34178
Cross-Site Request Forgery CSRF vulnerability in Groundhogg Inc. Groundhogg plugin = 2.7.11 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...
CVE-2023-34002
Cross-Site Request Forgery CSRF vulnerability in WP Inventory Manager plugin = 2.1.0.13 versions...
PT-2023-23898 · Unknown · Hyphenator
Name of the Vulnerable Software and Affected Versions: Hyphenator plugin versions = 5.1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the us...
PT-2023-24622 · WordPress · Wp Inventory Manager
Name of the Vulnerable Software and Affected Versions: WP Inventory Manager plugin versions = 2.1.0.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
PT-2023-24720 · WordPress · Wp-Cirrus
Name of the Vulnerable Software and Affected Versions: WP-Cirrus plugin versions 0.6.11 and earlier Description: A Cross-Site Request Forgery CSRF issue exists, which can be exploited by an attacker to perform unauthorized actions on the affected system. Recommendations: For WP-Cirrus plugin...
PT-2023-23834 · Xtemos · Woodmart - Multipurpose Woocommerce Theme
Name of the Vulnerable Software and Affected Versions: xtemos WoodMart - Multipurpose WooCommerce Theme versions = 7.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that...
PT-2023-24028 · WordPress · Woocommerce Product Add-Ons
Name of the Vulnerable Software and Affected Versions: WooCommerce Product Add-Ons plugin versions = 6.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...
PT-2023-23143 · Joomsky · Joomsky Js Job Manager
Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager plugin versions = 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...
PT-2023-24707 · Sakura Internet Inc. · Ts Webfonts For さくらのレンタルサーバ
Name of the Vulnerable Software and Affected Versions: SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin versions = 3.1.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...
PT-2023-20400 · Unknown · Frédéric Sheedy Etsy Shop
Name of the Vulnerable Software and Affected Versions: Frédéric Sheedy Etsy Shop plugin versions = 3.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...
PT-2023-23836 · WordPress · Sybre Waaijer Pro Mime Types
Name of the Vulnerable Software and Affected Versions: Sybre Waaijer Pro Mime Types – Manage file media types plugin versions = 1.0.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...
CVE-2023-5818
The Amazonify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8.1. This is due to missing or incorrect nonce validation on the amazonifyOptionsPage function. This makes it possible for unauthenticated attackers to update the plugins setting...
CVE-2023-5532
The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect nonce validation on the 'imgmapsaveareatitle' function. This makes it possible for unauthenticated attackers to update the post title and...
WordPress Amazonify Plugin <= 0.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Amazonify Type Plugin Vulnerable versions = 0.8.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5818 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a36688b74e5b Credits Ala Arfaoui Required privile...