CVE-2023-23804

Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Feed plugin = 1.2.7 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Feed plugin = 1.2.7 versions...

CVE-2023-23804 WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Feed plugin = 1.2.7 versions...

CVE-2023-23804

CVE-2023-23804 affects the HasThemes HT Feed WordPress plugin up to version 1.2.7. It is a CSRF vulnerability (unauthenticated) with a remediation that patches are available in version 1.2.8. PatchStack notes the issue as low severity/low exploit likelihood and recommends updating to 1.2.8 to fix...

CVE-2023-23804 WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Feed plugin = 1.2.7 versions...

Wordpress Plugin HT Feed 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-19219 · Hasthemes · Ht Feed

Name of the Vulnerable Software and Affected Versions: HasThemes HT Feed plugin versions 1.2.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

Software Image Social Feed Plugin Type Plugin Vulnerable versions = 1.7.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24412 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a2267f708209 Credits yuyudhn Required...

Open-Source Projects Use the Wordfence Vulnerability Data Feed API and You Can Too!

Prior to joining the Wordfence Threat Intelligence team, I spent several years as a vulnerability analyst, responsible for collecting, analyzing, and curating every publicly disclosed vulnerability. This meant collecting vulnerability information from almost a hundred different, disparate sources...

Drogon 注入漏洞

Drogon is an open source HTTP application framework based on C++14/17. Drogon can be used to easily build various types of web application server programs using C++. A security vulnerability exists in Drogon that stems from a CRLF injection issue that allows an attacker to add rn characters and...

CVE-2020-36739

The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the myftsfbloadmore function. This makes it possible for unauthenticated...

Cross site request forgery (csrf)

The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the myftsfbloadmore function. This makes it possible for unauthenticated...

PT-2023-11879 · WordPress · Feed Them Social

Name of the Vulnerable Software and Affected Versions: Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress versions up to, and including, 2.8.6 Description: The issue is due to missing or incorrect nonce validation on the my fts fb load more function, making it possible...

WordPress Plugin Feed Them Social – Page, Post, Video, and Photo Galleries 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site request forgery...

CVE-2021-25394

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-07-03 13:55:50+00:00| exploited| https://t.me/KomunitiSiber/437 2023-07-03 14:02:17+00:00| exploited| Telegram/fuuBsVYjurZRlHbZWSyUxfq8L5euBIwJMZ7mQsB877Q 2024-12-24...

CVE-2021-25489

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:46+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971846 2025-02-14 21:08:32+00:00| seen| Telegram/n5CrZtNloi9lGLONfjAThMtpupYWH9TjR2BIidxI6D1rJVMm...

CVE-2023-2005 Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID 202306261202 ; Nessus: before Plugin Feed ID 202306261202 ; Security Center: before Plugin Feed ID 202306261202 . This vulnerability could allow a malicious actor with...

PT-2023-17405 · Tenable · Tenable.Io +2

Name of the Vulnerable Software and Affected Versions: Tenable.Io versions before Plugin Feed ID 202306261202 Tenable Nessus versions before Plugin Feed ID 202306261202 Tenable Security Center versions before Plugin Feed ID 202306261202 Description: This issue could allow a malicious actor with...

CVE-2023-37450

creationtimestamp| type| source ---|---|--- 2023-06-23 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1049 2023-07-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1061 2023-07-11 06:11:54+00:00| exploited| https://t.me/thehackernews/3580...

CVE-2020-12641

creationtimestamp| type| source ---|---|--- 2023-06-22 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-06-28 19:04:46+00:00| seen| https://t.me/itsecnews/2805 2023-12-04 09:23:00+00:00| seen| https://t.me/arpsyndicate/1166 2024-12-24 20:34:37+00:00| seen|...