vppbazzar.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1134998 Security Researcher Manojkhd Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting vppbazzar.com website and its users. Following...

booksplea.se Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1118615 Security Researcher metamorfosec Helped patch 1973 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting booksplea.se website...

rwmmint.com Cross Site Request Forgery vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting rwmmint.com website and its users. Following...

toplightingonline.com.au Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1118023 Security Researcher metamorfosec Helped patch 1962 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

shavemac.com Cross Site Request Forgery vulnerability

Security Researcher error404 Helped patch 520 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting shavemac.com website and its users. Following coordinated...

JVN#89259622: WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery

WordPress Plugin "Easy Property Listings" provided by Merv Barrett contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the informatio...

xbowtie.com Cross Site Request Forgery vulnerability

Security Researcher h1yusuf Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting xbowtie.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty ha...

lobbes.nl Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1034425 Security Researcher Auntor Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting lobbes.nl website and its user...

app.truconversion.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1024374 Security Researcher Auntor Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting app.truconversion.com website...

gettransfer.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1024190 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

JVN#26838191: WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery

WordPress Plugin "WP Spell Check" provided by WP Spell Check contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information...

gamermarkt.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-985262 Security Researcher h1yusuf Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting gamermarkt.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

Atlassian Jira CSRF Login Vulnerability

Summary An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account. Tested Versions Atlassian Jira 7.6.4 Atlassian Jira 8.1.0 Product URL...

app.vyfakturuj.cz Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-955020 Security Researcher DakkarKey Helped patch 407 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting app.vyfakturuj.cz website...

WordPress Add Mime Types 2.2.1 Cross Site Request Forgery

Exploit Title: CSRF vulnerabilities in WP Add Mime Types Plugin...

WordPress Plugin Add Mime Types 2.2.1 - Cross-Site Request Forgery

Exploit Title: CSRF vulnerabilities in WP Add Mime Types Plugin...

prophete.de Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-932783 Security Researcher metamorfosec Helped patch 1990 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting prophete.de website an...

merebuy.de Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-932780 Security Researcher metamorfosec Helped patch 1990 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting merebuy.de website and...

store.mapsofworld.com Cross Site Request Forgery vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting store.mapsofworld.com website and its users. Followin...

JVN#29933378: WordPress Plugin "Custom CSS Pro" vulnerable to cross-site request forgery

WordPress Plugin "Custom CSS Pro" provided by WaspThemes contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information provided...