PT-2026-104019

Name of the Vulnerable Software and Affected Versions PictShare versions prior to 3.7.1 Description An information disclosure issue exists where unauthenticated attackers can obtain the secret delete code and uploader metadata. This occurs when calling the 'API::info' endpoint, which returns the...

EUVD-2019-1897

Malware in sbrugna...

WordPress plugin WP Coder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2022-16307 · WordPress · Wp Coder

Name of the Vulnerable Software and Affected Versions: WP Coder WordPress plugin versions prior to 2.5.3 Description: The issue is related to the lack of a CSRF check when deleting code created by the plugin. This could allow attackers to make a logged-in admin delete arbitrary code via a CSRF...