Lucene search
K

15 matches found

EUVD
EUVD
added 2026/02/25 12:30 p.m.5 views

EUVD-2026-8520

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS5.5AI score0.00131EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/25 9:26 a.m.4 views

CVE-2026-2410

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS5.4AI score0.00131EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/25 9:26 a.m.25 views

CVE-2026-2410 Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS0.00131EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/25 9:26 a.m.3 views

CVE-2026-2410 Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS5.5AI score0.00131EPSS
Exploits0References4
CVE
CVE
added 2026/02/25 9:26 a.m.13 views

CVE-2026-2410

CVE-2026-2410 refers to the WordPress plugin Disable Admin Notices – Hide Dashboard Notifications, vulnerable to Cross-Site Request Forgery (CSRF) up to version 1.4.2. The issue arises from missing nonce validation in the showPageContent() function, enabling unauthenticated attackers to craft req...

4.3CVSS5.5AI score0.00131EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/25 12:0 a.m.9 views

WordPress plugin Disable Admin Notices – Hide Dashboard Notifications 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00131EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/02/24 11:18 p.m.7 views

WordPress Disable Admin Notices - Hide Dashboard Notifications plugin <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

WordPress Disable Admin Notices - Hide Dashboard Notifications plugin = 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by lucsob in WordPress Plugin Disable Admin Notices individually versions = 1.4.2...

4.3CVSS5.4AI score0.00131EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-46001

Malicious code in bioql PyPI...

4.3CVSS8.6AI score0.00189EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:44 a.m.5 views

CVE-2024-52420

Cross-Site Request Forgery CSRF vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through = 1.4.0...

4.3CVSS7.2AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.15 views

CVE-2024-52420

Cross-Site Request Forgery CSRF vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through = 1.4.0...

4.3CVSS0.00189EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.10 views

CVE-2024-52420 WordPress Disable Admin Notices individually plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Motion Disable Admin Notices individually allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through 1.3.5...

4.3CVSS7AI score0.00189EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.62 views

CVE-2024-52420

CVE-2024-52420 concerns a Cross-Site Request Forgery in the WordPress plugin Disable Admin Notices individually. The initial record specifies that the issue affects plugin versions up to 1.3.5, and multiple connected sources corroborate a CSRF vulnerability in this plugin. Patchstack and related ...

4.3CVSS7.2AI score0.00189EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.1 views

WordPress plugin Disable Admin Notices individually 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS7.8AI score0.00189EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.2 views

PT-2024-35260 · Unknown · Disable Admin Notices Individually

Name of the Vulnerable Software and Affected Versions: Disable Admin Notices individually versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

4.3CVSS9.4AI score0.00189EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/11/13 11:6 a.m.2 views

WordPress Disable Admin Notices individually plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Disable Admin Notices individually versions = 1.4.0...

4.3CVSS7AI score0.00189EPSS
Exploits0Affected Software1
Rows per page
Query Builder