10422 matches found
CVE-2023-45651
CVE-2023-45651 concerns the WordPress plugin WP Attachments . The vulnerability is a Cross-Site Request Forgery (CSRF) that affects WP Attachments versions up to and including 5.0.11. A fix exists in version 5.0.12 . Multiple connected sources corroborate the CSRF impact and the vendor-provided p...
CVE-2023-4827 File Manager Pro < 1.8 - Remote Code Execution via CSRF
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the fsconnector AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell...
PT-2023-29723 · Unknown · Xydac Ultimate Taxonomy Manager
Name of the Vulnerable Software and Affected Versions: XYDAC Ultimate Taxonomy Manager plugin versions = 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
PT-2023-29624 · Mailmunch · Constant Contact Forms By Mailmunch
Name of the Vulnerable Software and Affected Versions: MailMunch Constant Contact Forms by MailMunch plugin versions = 2.0.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...
PT-2023-29626 · Unknown · Fla-Shop.Com Html5 Maps
Name of the Vulnerable Software and Affected Versions: Fla-shop.Com HTML5 Maps plugin versions = 1.7.1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
PT-2023-29618 · Unknown · Caret Country Access Limit
Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...
PT-2023-29586 · Unknown · Christopher Finke Feed Statistics
Name of the Vulnerable Software and Affected Versions: Christopher Finke Feed Statistics plugin versions = 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Zizou1988 IRivYou plugin = 2.2.1 versions...
CVE-2023-45108
CVE-2023-45108 affects the WordPress Mailrelay plugin (v <= 2.1.1). The vulnerability is a Cross-Site Request Forgery (CSRF) in the plugin, enabling unauthorized actions on behalf of authenticated users. Affected products/versions: Mailrelay plugin
PT-2023-29476 · WordPress · Pinpoint Booking System
Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System plugin versions = 2.9.9.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...
CVE-2023-45048
Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...
CVE-2023-45048
Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...
CVE-2023-45047
Cross-Site Request Forgery CSRF vulnerability in LeadSquared, Inc LeadSquared Suite plugin = 0.7.4 versions...
PT-2023-29387 · Supsystic · Contact Form By Supsystic
Name of the Vulnerable Software and Affected Versions: Supsystic Contact Form by Supsystic plugin versions = 1.7.27 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...
CVE-2023-43148
SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...
CVE-2023-43148
The CVE-2023-43148 issue affects SPA-Cart version 1.9.0.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow a remote attacker to delete all user accounts. Root cause is a CSRF flaw in SPA-Cart 1.9.0.3; no explicit patch/version fix is provided in the connected documents. Exploi...
CVE-2023-43149
SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...
PT-2023-29380 · Unknown · Fla-Shop.Com Interactive World Map
Name of the Vulnerable Software and Affected Versions: Fla-shop.Com Interactive World Map plugin versions = 3.2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...