PT-2024-17198

Name of the Vulnerable Software and Affected Versions AI Post Generator | AutoWriter plugin for WordPress versions up to, and including, 3.5 Description The issue is related to a missing capability check on the ai post generator delete Post AJAX action. This allows authenticated attackers with...

CVE-2023-5506

The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'imgmapdeleteareaajax' function in versions up to, and including, 1.2.6. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to...

CVE-2022-26589: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages...

PT-2022-17944

Name of the Vulnerable Software and Affected Versions Pluck CMS version 4.7.15 Description A Cross-Site Request Forgery CSRF issue allows attackers to delete arbitrary pages. Recommendations For Pluck CMS version 4.7.15, consider disabling the page deletion functionality until a patch is availabl...

CVE-2009-4089

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and 1 delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or 2 delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php...