109575 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...
CVE-2023-46781
CVE-2023-46781 is a CSRF vulnerability in the WordPress plugin Current Menu Item for Custom Post Types, vulnerable in versions
CVE-2023-46781 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...
CVE-2023-46781 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin = 1.5 versions...
CVE-2023-46777
CVE-2023-46777 is a CSRF vulnerability in the Feather Login Page (Custom Login Page | Temporary Users | Rebrand Login | Login Captcha) WordPress plugin, affecting versions up to 1.1.3. Root cause details are not provided beyond the CSRF label; however, remediation is available: upgrade to 1.1.4 o...
CVE-2023-40609
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aiyaz, maheshpatel Contact form 7 Custom validation allows SQL Injection.This issue affects Contact form 7 Custom validation: from n/a through 1.1.3...
CVE-2023-40609
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aiyaz, maheshpatel Contact form 7 Custom validation allows SQL Injection.This issue affects Contact form 7 Custom validation: from n/a through 1.1.3...
CVE-2023-40609
A vulnerability in aiyaz Khorajia Contact form 7 Custom validation cf7-field-validation.This issue affects Contact form 7 Custom validation: from n/a through = 1.1.3...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aiyaz, maheshpatel Contact form 7 Custom validation allows SQL Injection.This issue affects Contact form 7 Custom validation: from n/a through 1.1.3...
CVE-2023-40609
CVE-2023-40609: WordPress plugin Contact form 7 Custom validation (cf7-field-validation)
Improper Access Control
@strapi/strapi and @strapi/plugin-users-permissions are vulnerable to Improper Access Control. The vulnerability is caused by a missing configuration/provision to control which custom fields are allowed to be set during registration while calling the /api/auth/local/register route. This can lead ...
WordPress Plugin Current Menu Item for Custom Post Types Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the...
WordPress Plugin Custom Login Page | Temporary Users | Rebrand Login | Login Captcha Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Custom Login Page |...
PT-2023-24618 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.6 through 16.3.5 GitLab EE versions 16.4 through 16.4.1 GitLab EE versions 16.5 through 16.5.0 Description: An issue has been discovered in GitLab EE, where it was possible for an unauthorized project or group member to...
PT-2023-30206 · WordPress · Custom Login Page | Temporary Users | Rebrand Login | Login Captcha
Name of the Vulnerable Software and Affected Versions: Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin versions 1.1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick...
October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture
October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture. Hello everyone! October was an interesting and busy month for me. I started a new job, worked on my open source Vulristics project, and analyzed vulnerabilities...
GO-2023-2162 SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin
A malicious user can send a REST request to a List endpoint with filters that contain custom SQL statements. This can result in SQL injection...
CLSA-2023-1698949696 httpd: Fix of CVE-2023-31122
CVE-2023-31122: modmacro: Fix out-of-bounds read vulnerability by using own strncmp function...