11 matches found
EUVD-2023-41818
Malicious code in bioql PyPI...
CVE-2023-37991
Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...
WP Emoji One <= 0.6.0 - Settings Update via CSRF
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-37991
Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...
CVE-2023-37991
Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...
CVE-2023-37991
CVE-2023-37991 : A CSRF vulnerability exists in the WordPress plugin WP Emoji One (Monchito.Net) for versions ≤ 0.6.0. The issue is a missing CSRF check during settings updates, enabling unauthenticated or crafted requests to trigger admin actions when a logged-in user is targeted. Documented as ...
CVE-2023-37991 WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Monchito.Net WP Emoji One plugin = 0.6.0 versions...
WordPress Plugin wp-emoji-one Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-26236 · WordPress · Monchito.Net Wp Emoji One
Name of the Vulnerable Software and Affected Versions: Monchito.Net WP Emoji One plugin versions 0.6.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...
WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Emoji One Type Plugin Vulnerable versions = 0.6.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37991 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 799ab01968eb Credits Abdi Pranata Required...