CVE-2023-28618 WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin = 1.16 versions...

CVE-2023-28618

CVE-2023-28618 is a CSRF vulnerability in the WordPress plugin “Enhanced Plugin Admin” (versions

Enhanced Admin < 1.17 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin Enhanced Plugin Admin Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

pcs

0.11.6-3 - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz2222788 0.11.6-2 - Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm - Make use of filters when extracting tarballs to enhance...

PT-2023-21851 · Unknown · Marios Alexandrou Enhanced Plugin Admin

Name of the Vulnerable Software and Affected Versions: Marios Alexandrou Enhanced Plugin Admin plugin versions = 1.16 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

kernel: selinux: Add boundary check in put_entry()

In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in putentry Just like nextentry, boundary check is necessary to prevent memory out-of-bound access...

runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration

A flaw was found in runc. This vulnerability could allow a remote attacker to bypass security restrictions and create a symbolic link inside a container to the /proc directory, bypassing AppArmor and SELinux protections...

New Secaucus Point of Presence Increases Resilience for Financial Services

We are thrilled to announce the opening of a new cutting-edge Point of Presence PoP in Secaucus, New Jersey, which adds resilience to our network infrastructure located in the Northeastern United States region. This PoP represents the first build using next generation technology designed to...

SUSE CVE-2019-3878

A vulnerability was found in modauthmellon before v0.14.2. If Apache is configured as a reverse proxy and modauthmellon is configured to only let through authenticated users with the require valid-user directive, adding special HTTP headers that are normally used to start the special SAML ECP...

CVE-2023-40401

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication...

ImageMagick: Division by zero in ReadEnhMetaFile lead to DoS

An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561 Enhanced Ecommerce Google Analytics for WooCommerce

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

CVE-2023-40561 is a CSRF vulnerability in the Dotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin (versions

WordPress Plugin Enhanced Ecommerce Google Analytics for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Enhanced Ecommerce...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in its memory usage after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

PT-2023-28275 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...