Lucene search
+L

4 matches found

NVD
NVD
added 2023/12/18 11:15 p.m.16 views

CVE-2023-49763

Cross-Site Request Forgery CSRF vulnerability in Creatomatic Ltd CSprite.This issue affects CSprite: from n/a through 1.1...

8.8CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/12/18 10:28 p.m.17 views

CVE-2023-49763 WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Creatomatic Ltd CSprite.This issue affects CSprite: from n/a through 1.1...

4.3CVSS7AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/18 10:28 p.m.80 views

CVE-2023-49763

CVE-2023-49763 : WordPress plugin CSprite (by Creatomatic) &lt;= 1.1 is vulnerable to Cross-Site Request Forgery (CSRF) . The issue is due to insufficient nonce validation, enabling unauthenticated attackers to potentially trigger actions by convincing an admin to perform a forged request. Public...

8.8CVSS8.5AI score0.00294EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/04 12:00 a.m.17 views

WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software CSprite Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49763 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID db96e55816cc Credits Skalucy Required privilege...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder