EUVD-2020-24196

Malware in sbrugna...

EUVD-2024-35529

Malicious code in bioql PyPI...

CVE-2024-35771

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21...

CVE-2020-36755

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

CVE-2024-35771

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21...

CVE-2024-35771

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21...

CVE-2024-35771 WordPress Customizr theme <= 4.4.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21...

CVE-2024-35771 WordPress Customizr theme <= 4.4.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in presscustomizr Customizr.This issue affects Customizr: from n/a through 4.4.21...

CVE-2024-35771

CVE-2024-35771 is a Cross-Site Request Forgery (CSRF) vulnerability in the presscustomizr Customizr WordPress theme, affecting Customizr versions from n/a up to and including 4.4.21. The linked records show an NVD CVSSv3.1 base score of 8.8 (HIGH) for the vulnerability, indicating high impact if ...

WordPress plugin Customizr Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

WordPress Customizr theme <= 4.4.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Customizr versions = 4.4.21...

WordPress Customizr Theme <= 4.4.21 is vulnerable to Cross Site Request Forgery (CSRF)

Software Customizr Type Theme Vulnerable versions = 4.4.21 Fixed in 4.4.22 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-35771 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6f2a240dd11c Credits Dhabaleshwar Das Require...

CVE-2020-36755

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

CVE-2020-36755

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

Cross site request forgery (csrf)

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

CVE-2020-36755 Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

CVE-2020-36755

The CVE-2020-36755 entry refers to the WordPress Customizr theme (up to version 4.3.0) and identifies a Cross-Site Request Forgery flaw. The root cause is missing/incorrect nonce validation in the czr_fn_post_fields_save() function, which could allow unauthenticated attackers to post fields via a...

CVE-2020-36755 Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czrfnpostfieldssave function. This makes it possible for unauthenticated attackers to post fields via a forged request...

WordPress theme Customizr Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress theme Customizr, which stems from a missing or incorrect random...

WordPress Customizr theme <= 4.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Customizr theme versions = 4.3.2. Solution Update the WordPress Customizr theme to the latest available version at least 4.3.3...