CVE-2023-24395

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin = 1.0.3 versions...

CVE-2023-23869

Cross-Site Request Forgery CSRF vulnerability in Amit Agarwal Google XML Sitemap for Mobile plugin = 1.6.1 versions...

CVE-2023-23993

CVE-2023-23993 is a CSRF vulnerability in LionScripts: IP Blocker Lite plugin for WordPress, affecting versions <= 11.1.1. The vulnerability allows unauthenticated attackers to perform unintended actions on behalf of an authenticated user; patch status in provided sources is not clearly fixed ...

CVE-2023-22694 WordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arian Khosravi, Norik Davtian BigContact Contact Page plugin = 1.5.8 versions...

CVE-2023-22694

CVE-2023-22694 is a CSRF vulnerability in the WordPress BigContact Contact Page plugin versions ≤ 1.5.8. Public sources describe unauthenticated CSRF impacting plugin settings updates; the patch status in the provided documents indicates the issue remains unpatched for BigContact ≤ 1.5.8, with pa...

CVE-2023-24405

CVE-2023-24405 is a CSRF vulnerability in the WordPress plugin Contact Form 7 – PayPal & Stripe Add-on up to version 1.9.3 . Multiple connected sources confirm the issue and its fix. Root cause is a CSRF flaw in that add-on, enabling an attacker to induce unwanted actions in a site where users ar...

CVE-2023-22673 WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MageNet Website Monetization by MageNet plugin = 1.0.29.1 versions...

PT-2023-22066 · Wedevs · Wedevs Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: weDevs Happy Addons for Elementor plugin versions = 3.8.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

PT-2023-19342 · Lionscripts · Lionscripts Ip Blocker Lite

Name of the Vulnerable Software and Affected Versions: LionScripts: IP Blocker Lite plugin versions = 11.1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

PT-2023-19556 · WordPress · Scott Paterson Contact Form 7 Redirect & Thank You Page

Name of the Vulnerable Software and Affected Versions: Scott Paterson Contact Form 7 Redirect & Thank You Page plugin versions = 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...

CVE-2023-36256

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...

PT-2023-25462 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to gain privileges via the add function in adminlist.php. This is a Cross Site Request Forgery vulnerability. Recommendations: For ZZCMS versions 2023 and earlier...

CVE-2021-4402

The Multiple Roles plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the muaddrolesinsignupmeta and muaddrolesinsignupmetarecently functions. This makes it possible for unauthenticated...

CVE-2020-36749

The Easy Testimonials plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.1. This is due to missing or incorrect nonce validation on the saveCustomFields function. This makes it possible for unauthenticated attackers to save custom fields via a...

CVE-2020-36740

The Radio Buttons for Taxonomies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the savesingleterm function. This makes it possible for unauthenticated attackers to save terms via a...

CVE-2020-36738

The Cool Timeline Horizontal & Vertical Timeline plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the ctlsave function. This makes it possible for unauthenticated attackers to save fie...

CVE-2020-36737

The Import / Export Customizer Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the astraadminerrors function. This makes it possible for unauthenticated attackers to display ...

WordPress Plugin WooCommerce Checkout & Funnel Builder by CartFlows 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-12502 · WordPress · Contact Form 7 Style

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Style plugin for WordPress versions up to, and including, 3.2 Description: The issue is due to missing or incorrect nonce validation on the manage wp posts be qe save post function, making it possible for unauthenticated...

WordPress Plugin Amministrazione Trasparente 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...