WordPress XT Quick View for WooCommerce plugin <= 1.9.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress XT Quick View for WooCommerce plugin versions = 1.9.5. Solution Update the WordPress XT Quick View for WooCommerce plugin to the latest available version at least 1.9.6...

WordPress Ultra Elementor Addons plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultra Elementor Addons plugin versions = 1.0.0. Solution No patched version available...

Unauthorised AJAX Calls via Freemius

Description The plugins and themes use an insecure version of the Freemius Framework, which is lacking CSRF and/or authorisation in some of its AJAX actions. As a result, any authenticated users, such as subscriber could access the debug logs. Unauthenticated attackers could also make a logged in...

WordPress Prime Slider – Addons For Elementor plugin <= 2.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Prime Slider – Addons For Elementor plugin versions = 2.6.2. Solution Update the WordPress Prime Slider – Addons For Elementor plugin to the latest available version at least 2.7.0...

WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 4.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 4.0.4. Solution Update the WordPress SSL Zen – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest...

WordPress Payment Gateway Groups for WooCommerce plugin <= 1.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Payment Gateway Groups for WooCommerce plugin versions = 1.1.2. Solution Update the WordPress Payment Gateway Groups for WooCommerce plugin to the latest available version at least 1.1.3...

WordPress Power Ups for Elementor plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Power Ups for Elementor plugin versions = 1.2.1. Solution Update the WordPress Power Ups for Elementor plugin to the latest available version at least 1.2.2...

WordPress WooCommerce Checkout For Digital Goods plugin <= 3.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Checkout For Digital Goods plugin versions = 3.6.3. Solution Update the WordPress WooCommerce Checkout For Digital Goods plugin to the latest available version at least 3.6.4...

WordPress Security Ninja – Secure Firewall & Secure Malware Scanner plugin < 5.136 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Security Ninja – Secure Firewall & Secure Malware Scanner plugin versions 5.136. Solution Update the WordPress Security Ninja – Secure Firewall & Secure Malware Scanner plugin to the latest available...

WordPress SLP – Extenders plugin < 5.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SLP – Extenders plugin versions 5.9.1. Solution Update the WordPress SLP – Extenders plugin to the latest available version at least 5.9.1...

WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin < 3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin versions 3.6. Solution Update the WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin to the...

WordPress Agy – Age verification for WooCommerce plugin <= 4.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Agy – Age verification for WooCommerce plugin versions = 4.3. Solution Update the WordPress Agy – Age verification for WooCommerce plugin to the latest available version at least 4.3.1...

WordPress Magic Post Thumbnail plugin < 3.3.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Magic Post Thumbnail plugin versions 3.3.11. Solution Update the WordPress Magic Post Thumbnail plugin to the latest available version at least 3.3.11...

WordPress WooCommerce Simple Frontend Manager plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Simple Frontend Manager plugin versions = 1.0.2. Solution Update the WordPress WooCommerce Simple Frontend Manager plugin to the latest available version at least 1.0.3...

WordPress My Chatbot plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress My Chatbot plugin versions = 1.1. Solution No patched version available...

WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Restaurant & Cafe Addon for Elementor plugin < 1.4.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Restaurant & Cafe Addon for Elementor plugin versions 1.4.6. Solution Update the WordPress Restaurant & Cafe Addon for Elementor plugin to the latest available version at least 1.4.6...

WordPress Open User Map | Everybody can add locations plugin < 1.2.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Open User Map | Everybody can add locations plugin versions 1.2.11. Solution Update the WordPress Open User Map | Everybody can add locations plugin to the latest available version at least 1.2.11...

WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin <= 1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin versions = 1.4. Solution Update the WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin to the latest available versi...

WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000015 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Insert or Embed Articulate Content into WordPress plugin versions = 4.3000000015. Solution Update the WordPress Insert or Embed Articulate Content into WordPress plugin to the latest available version ...