WordPress WPHelpKit plugin <= 0.9.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WPHelpKit plugin versions = 0.9.2. Solution No patched version available...

WordPress WP REST User plugin <= 1.4.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP REST User plugin versions = 1.4.3. Solution No patched version available...

WordPress Кнопка Яндекс Денег plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Кнопка Яндекс Денег plugin versions = 2.4.0. Solution No patched version available...

WordPress Cart tracking for WooCommerce plugin < 1.0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Cart tracking for WooCommerce plugin versions 1.0.9. Solution Update the WordPress Cart tracking for WooCommerce plugin to the latest available version at least 1.0.9...

WordPress Slider Block Gutenslider plugin <= 5.6.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Slider Block Gutenslider plugin versions = 5.6.1. Solution Update the WordPress Slider Block Gutenslider plugin to the latest available version at least 5.7.0...

WordPress WP Data Access plugin < 5.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Data Access plugin versions 5.1.4. Solution Update the WordPress WP Data Access plugin to the latest available version at least 5.1.4...

WordPress Cryptocurrency Portfolio Tracker plugin <= 0.0.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Cryptocurrency Portfolio Tracker plugin versions = 0.0.17. Solution No patched version available...

WordPress Content Slider for WP Posts (Section Slider) plugin <= 0.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Slider for WP Posts Section Slider plugin versions = 0.0.0. Solution No patched version available...

WordPress Simple Giveaways plugin <= 2.42.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Simple Giveaways plugin versions = 2.42.0. Solution Update the WordPress Simple Giveaways plugin to the latest available version at least 2.42.1...

WordPress Template Manager for Gutenberg Block plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Template Manager for Gutenberg Block plugin versions = 1.0.5. Solution No patched version available...

WordPress SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview plugin <= 2.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview plugin versions = 2.0.4. Solution Update the WordPress SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview...

WordPress Stop WP Comment Spam plugin < 1.3.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Stop WP Comment Spam plugin versions 1.3.2. Solution Update the WordPress Stop WP Comment Spam plugin to the latest available version at least 1.3.2...

WordPress Sales Page Addon – Elementor & Beaver Builder plugin < 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Sales Page Addon – Elementor & Beaver Builder plugin versions 1.3. Solution Update the WordPress Sales Page Addon – Elementor & Beaver Builder plugin to the latest available version at least 1.3...

WordPress Walker Core plugin < 1.1.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Walker Core plugin versions 1.1.8. Solution Update the WordPress Walker Core plugin to the latest available version at least 1.1.8...

WordPress Book BuyBack Prices plugin <= 1.0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Book BuyBack Prices plugin versions = 1.0.9. Solution No patched version available...

WordPress Alley Business Toolkit plugin <= 1.1.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Alley Business Toolkit plugin versions = 1.1.7. Solution Update the WordPress Alley Business Toolkit plugin to the latest available version at least 2.0.0...

WordPress Payment Gateway for PayFabric plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Payment Gateway for PayFabric plugin versions = 1.0.5. Solution Update the WordPress Payment Gateway for PayFabric plugin to the latest available version at least 1.0.12...

WordPress PDF Invoices & Packing Slips For WooCommerce plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress PDF Invoices & Packing Slips For WooCommerce plugin versions = 1.0.3. Solution No patched version available...

Unauthorised AJAX Calls via Freemius

Description The plugins and themes use an insecure version of the Freemius Framework, which is lacking CSRF and/or authorisation in some of its AJAX actions. As a result, any authenticated users, such as subscriber could access the debug logs. Unauthenticated attackers could also make a logged in...

WordPress XT Ajax Add To Cart for WooCommerce plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress XT Ajax Add To Cart for WooCommerce plugin versions = 1.0.3. Solution Update the WordPress XT Ajax Add To Cart for WooCommerce plugin to the latest available version at least 1.0.4...