3745 matches found
CVE-2019-15840
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...
Cross site request forgery (csrf)
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...
Cross site request forgery (csrf)
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajaxwooinfobannerpostclick, ajaxwooinfobannerpostxout, or ajaxfbtogglevisibility...
CVE-2019-15841
CVE-2019-15841 affects the WordPress Facebook for WooCommerce plugin prior to 1.9.15. The vulnerability is a CSRF flaw in the AJAX actions ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, and ajax_fb_toggle_visibility, enabling unintended requests to the server. Affected software: W...
CVE-2019-15840
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...
CVE-2019-15840
CVE-2019-15840 affects the WordPress plugin facebook-for-woocommerce prior to version 1.9.14. The issue is a cross-site request forgery (CSRF) vulnerability in the plugin’s handling of sensitive actions, exposed via the plugin’s WordPress integration. The root cause is insufficient CSRF protectio...
WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS
The WooCommerce Product Feed for Google, Bing, eBay and Many More WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability...
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
Cross site request forgery (csrf)
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2019-15781
CVE-2019-15781 corresponds to a CSRF vulnerability in the WordPress plugin facebook-by-weblizar prior to version 2.8.5. The issue stems from insufficient verification that requests originate from a trusted user, enabling an attacker to induce unintended actions on behalf of an authenticated user....
CVE-2019-15781
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...
CVE-2015-9350
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
CVE-2015-9351
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...
Cross site scripting
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
Design/Logic Flaw
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...
CVE-2015-9350
The CVE-2015-9350 entry concerns the WordPress plugin Feed Them Social before version 1.7.0, where the Facebook Feeds load more button is vulnerable to reflected cross-site scripting (XSS). The vulnerability allows injected client-side script to be executed in the context of the affected page. Pu...
CVE-2015-9350
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...
CVE-2015-9351
CVE-2015-9351 concerns the WordPress plugin Feed Them Social (before 1.7.0). The vulnerability allows possible shortcode execution in the Facebook Feeds load more button, enabling arbitrary code execution via shortcode handling. Affected component: Feed Them Social plugin for WordPress; root caus...