CVE-2024-11353

The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletemessage function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and...

PT-2021-11827

Name of the Vulnerable Software and Affected Versions: PHPFusion version 9.03.90 Description: The issue allows an attacker to perform a CSRF attack, which can lead to the deletion of all shoutbox messages on behalf of the logged-in victim. Recommendations: For PHPFusion version 9.03.90, as a...