WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin <= 1.4.16 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin versions = 1.4.16. Solution Update the WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin to the latest...

WordPress Guest Author Affiliate plugin <= 1.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Guest Author Affiliate plugin versions = 1.1.4. Solution Update the WordPress Guest Author Affiliate plugin to the latest available version at least 1.1.5...

WordPress Content Sidebars plugin <= 1.6.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Sidebars plugin versions = 1.6.7. Solution Update the WordPress Content Sidebars plugin to the latest available version at least 1.6.8...

WordPress WP Data Access plugin < 5.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Data Access plugin versions 5.1.4. Solution Update the WordPress WP Data Access plugin to the latest available version at least 5.1.4...

WordPress Кнопка Яндекс Денег plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Кнопка Яндекс Денег plugin versions = 2.4.0. Solution No patched version available...

WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin <= 4.12.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin versions = 4.12.8. Solution Update the WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin to the latest available version at...

WordPress SV Forms plugin < 1.8.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Forms plugin versions 1.8.10. Solution Update the WordPress SV Forms plugin to the latest available version at least 1.8.10...

WordPress Ted – WordPress Text Editor plugin <= 0.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ted – WordPress Text Editor plugin versions = 0.0.4. Solution Update the WordPress Ted – WordPress Text Editor plugin to the latest available version at least 0.0.5...

WordPress Auto Post WooCommerce Products plugin <= 2.1.60 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto Post WooCommerce Products plugin versions = 2.1.60. Solution No patched version available...

WordPress Prime Slider – Addons For Elementor plugin <= 2.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Prime Slider – Addons For Elementor plugin versions = 2.6.2. Solution Update the WordPress Prime Slider – Addons For Elementor plugin to the latest available version at least 2.7.0...

WordPress Modern Designs for Gravity Forms plugin <= 1.1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Modern Designs for Gravity Forms plugin versions = 1.1.3. Solution No patched version available...

WordPress Giveaways for woocommerce plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Giveaways for woocommerce plugin versions = 1.0.0. Solution No patched version available...

WordPress MailChimp Manager plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress MailChimp Manager plugin versions = 1.0.2. Solution No patched version available...

WordPress Elementor Addon Elements plugin < 1.11.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elementor Addon Elements plugin versions 1.11.14. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.14...

WordPress Modern Addons for Elementor Page Builder plugin <= 1.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Modern Addons for Elementor Page Builder plugin versions = 1.1.2. Solution Update the WordPress Modern Addons for Elementor Page Builder plugin to the latest available version at least 1.2.0...

WordPress HQTheme Extra plugin <= 1.0.18 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HQTheme Extra plugin versions = 1.0.18. Solution No patched version available...

WordPress Elation theme < 1.1.01 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Elation theme versions 1.1.01. Solution Update the WordPress Elation theme to the latest available version at least 1.1.01...

WordPress Alt Manager plugin < 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

WordPress ClinicalWP Core plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ClinicalWP Core plugin versions = 1.0.5. Solution No patched version available...

Information Disclosure

microweber is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization in the Handler.php file allow to view sensitive information in debug mode...