34 matches found
CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.2.7...
WordPress plugin Featured Post Creative 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-12240 · Unknown · Featured Post Creative +1
Name of the Vulnerable Software and Affected Versions: Featured Post Creative versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative, which allows exploiting incorrectly configured access...
CVE-2024-51650
Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...
CVE-2024-51650 WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in scottmydollarplancom Random Featured Post random-featured-post-plugin allows Stored XSS.This issue affects Random Featured Post: from n/a through = 1.1.3...
CVE-2024-51650
CVE-2024-51650 describes a CSRF-induced Stored XSS in the WordPress plugin Random Featured Post (versions
WordPress plugin Random Featured Post 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2024-34795 · Unknown · Random Featured Post
Name of the Vulnerable Software and Affected Versions: Random Featured Post versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...
WordPress Random Featured Post plugin <= 1.1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Random Featured Post versions = 1.1.3...
WordPress Random Featured Post Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Random Featured Post Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51650 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 985c582f06c5 Credits SOPROBRO Require...
WordPress Featured Post Creative Plugin <= 1.4 is vulnerable to Broken Access Control
Software Featured Post Creative Type Plugin Vulnerable versions = 1.4 Fixed in 1.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID a180338dc363 Credits Abdi Pranata Require...
WordPress Featured Post Creative Plugin <= 1.2.7 is vulnerable to Broken Access Control
Software Featured Post Creative Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30488 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6ae105faf5be Credits Cat Required privilege...
WordPress Featured Post With Thumbnail Plugin <= 1.4 - Unspecified Timthumb
This plugin is prone to an Unspecified timthumb. Solution Update the plugin...
WordPress Plugin WP Featured Post with Thumbnail 3.0 - src Cross-Site Scripting
WordPress Plugin WP Featured Post with Thumbnail 3.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/45998/info The WP Featured Post with Thumbnail Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...