WordPress Buttonizer plugin < 2.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Buttonizer plugin versions 2.6.3. Solution Update the WordPress Buttonizer plugin to the latest available version at least 2.6.3...

WordPress Extend Filter Products By Price Widget plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Extend Filter Products By Price Widget plugin versions = 1.0. Solution No patched version available...

WordPress SV Columns Manager plugin < 1.8.02 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Columns Manager plugin versions 1.8.02. Solution Update the WordPress SV Columns Manager plugin to the latest available version at least 1.8.02...

WordPress WooCommerce Simple Frontend Manager plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Simple Frontend Manager plugin versions = 1.0.2. Solution Update the WordPress WooCommerce Simple Frontend Manager plugin to the latest available version at least 1.0.3...

WordPress WP EasyPay plugin < 4.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP EasyPay plugin versions 4.0.2. Solution Update the WordPress WP EasyPay plugin to the latest available version at least 4.0.2...

WordPress Advanced Database Replacer plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advanced Database Replacer plugin versions = 1.1.0. Solution No patched version available...

WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin <= 1.4.16 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin versions = 1.4.16. Solution Update the WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin to the latest...

WordPress Guest Author Affiliate plugin <= 1.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Guest Author Affiliate plugin versions = 1.1.4. Solution Update the WordPress Guest Author Affiliate plugin to the latest available version at least 1.1.5...

WordPress Content Sidebars plugin <= 1.6.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Sidebars plugin versions = 1.6.7. Solution Update the WordPress Content Sidebars plugin to the latest available version at least 1.6.8...

WordPress WP Data Access plugin < 5.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Data Access plugin versions 5.1.4. Solution Update the WordPress WP Data Access plugin to the latest available version at least 5.1.4...

WordPress Кнопка Яндекс Денег plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Кнопка Яндекс Денег plugin versions = 2.4.0. Solution No patched version available...

WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin <= 4.12.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin versions = 4.12.8. Solution Update the WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin to the latest available version at...

WordPress SV Forms plugin < 1.8.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Forms plugin versions 1.8.10. Solution Update the WordPress SV Forms plugin to the latest available version at least 1.8.10...

WordPress Ted – WordPress Text Editor plugin <= 0.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ted – WordPress Text Editor plugin versions = 0.0.4. Solution Update the WordPress Ted – WordPress Text Editor plugin to the latest available version at least 0.0.5...

WordPress Auto Post WooCommerce Products plugin <= 2.1.60 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto Post WooCommerce Products plugin versions = 2.1.60. Solution No patched version available...

WordPress Prime Slider – Addons For Elementor plugin <= 2.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Prime Slider – Addons For Elementor plugin versions = 2.6.2. Solution Update the WordPress Prime Slider – Addons For Elementor plugin to the latest available version at least 2.7.0...

Unauthorised AJAX Calls via Freemius

Description The plugins and themes use an insecure version of the Freemius Framework, which is lacking CSRF and/or authorisation in some of its AJAX actions. As a result, any authenticated users, such as subscriber could access the debug logs. Unauthenticated attackers could also make a logged in...

WordPress Modern Designs for Gravity Forms plugin <= 1.1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Modern Designs for Gravity Forms plugin versions = 1.1.3. Solution No patched version available...

WordPress Giveaways for woocommerce plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Giveaways for woocommerce plugin versions = 1.0.0. Solution No patched version available...

WordPress MailChimp Manager plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress MailChimp Manager plugin versions = 1.0.2. Solution No patched version available...