CVE-2022-1758

CVE-2022-1758 affects the WordPress plugin Genki Pre-Publish Reminder (versions

WordPress plugin Genki Pre-Publish Reminder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Genki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS as well as RCE when custom code is added via the plugin settings. PoC...

WordPress Genki Pre-Publish Reminder plugin <= 1.4.1 - Stored XSS and RCE via CSRF vulnerability

Stored XSS and RCE via CSRF vulnerability discovered by Daniel Ruf in WordPress Genki Pre-Publish Reminder plugin versions = 1.4.1. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for download. This closure is temporary, pending a full review...

Genki Desktop for PC suffers from dll hijacking vulnerability

Genki Desktop for PC is a desktop wallpaper beautification software. Genki Desktop for PC suffers from a dll hijacking vulnerability. Attackers can use the vulnerability to load malicious dll and execute malicious code...

genki-mama.com XSS vulnerability

Open Bug Bounty ID: OBB-576348 Description| Value ---|--- Affected Website:| genki-mama.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...