Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2023/07/12 4:15 a.m.•19 views

CVE-2021-4409

The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpfdeletefeed function. This makes it possible for unauthenticated attackers to delete an export...

4.3CVSS5.6AI score0.00384EPSS
SaveExploits0References9
NVD
NVD
•added 2023/07/12 4:15 a.m.•31 views

CVE-2021-4409

The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpfdeletefeed function. This makes it possible for unauthenticated attackers to delete an export...

4.3CVSS4.2AI score0.00384EPSS
SaveExploits0References9
Prion
Prion
•added 2023/07/12 4:15 a.m.•23 views

Cross site request forgery (csrf)

The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpfdeletefeed function. This makes it possible for unauthenticated attackers to delete an export...

4.3CVSS4.3AI score0.00384EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2023/07/12 3:02 a.m.•39 views

CVE-2021-4409 WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass

The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpfdeletefeed function. This makes it possible for unauthenticated attackers to delete an export...

4.3CVSS4.6AI score0.00384EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/07/12 12:00 a.m.•5 views

PT-2023-12521

Name of the Vulnerable Software and Affected Versions WooCommerce Etsy Integration plugin for WordPress versions up to, and including, 3.3.1 Description The issue arises from missing or incorrect nonce validation on the etcpf delete feed function, allowing unauthenticated attackers to delete an...

4.3CVSS0.00384EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•6 views

CVE-2021-4409: Cross-Site Request Forgery (CSRF)

The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpfdeletefeed function. This makes it possible for unauthenticated attackers to delete an export...

4.3CVSS5.3AI score0.00384EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•18 views

WordPress Plugin WooCommerce Etsy Integration Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS4.8AI score0.00384EPSS
SaveExploits0References10
Rows per page
Query Builder