WordPress Hide Dashboard Notifications plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Hide Dashboard Notifications versions = 1.2.3...

CVE-2024-33683: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3...

WordPress plugin Hide Dashboard Notifications 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

PT-2024-3145 · Tutor Lms · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS versions up to, and including, 2.6.2 Description: The issue is related to a missing capability check on the hide notices function, which allows unauthorized modification of data. This makes it possible for unauthenticated attackers ...

PT-2024-18323 · WordPress · Product Sort/Display For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Sort and Display for WooCommerce plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to a missing capability check on the psad update product cat custom meta ajax function, allowing unauthorized...

WordPress Hide My WP < 6.2.9 - Unauthenticated SQL injection Vulnerability

Exploit Title: Wordpress Plugin Hide My WP 6.2.9 - Unauthenticated SQLi Original Researcher: Xenofon Vassilakopoulos Exploit Author: Xenofon Vassilakopoulos Submitter: Xenofon Vassilakopoulos Vendor Homepage: https://wpwave.com/ Version: Hide My WP v6.2.8 and prior Tested on: Hide My WP v6.2.7...

WordPress WPS Hide Login Plugin <= 1.9.11 is vulnerable to Bypass Vulnerability

Software WPS Hide Login Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-49748 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b95951ba6ec7 Credits Naveen Muthusamy Required privilege...

How to hide desktop viewer toolbar

Instructions on how to hide desktop viewer toolbar...

EasyImages Path Traversal Vulnerability

EasyImages is a thin wrapper on PIL by Jakub Cieslik individual developer. It is used for exploring, visualizing and sharing images. A path traversal vulnerability exists in icret EasyImages version 2.8.3, which stems from unknown code in app/hide.php that causes path traversal via the parameter...

PT-2023-32872 · Unknown · Icret Easyimages

Name of the Vulnerable Software and Affected Versions: icret EasyImages version 2.8.3 Description: A problematic vulnerability was found in icret EasyImages, affecting unknown code of the file app/hide.php. The manipulation of the key argument leads to path traversal, allowing an attacker to acce...

CVE-2023-5940

The WP Not Login Hide WPNLH WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-5940

CVE-2023-5940 affects the WP Not Login Hide (WPNLH) WordPress plugin up to version 1.0. The issue is stored XSS in the plugin settings: an admin (high privilege) could inject payloads via the WPNLH Settings warning message field, potentially triggering stored XSS for authenticated users (includin...

CVE-2023-5940: Improper Neutralization of Input During Web Page Generation

The WP Not Login Hide WPNLH WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

LWS Hide Login < 2.1.9 - Protection Mechanism Bypass

Description The LWS Hide Login plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 2.1.8. This is due to the fact that attackers can bypass the hidden login page by visiting install.php. This makes it possible for unauthenticated attackers to...

WordPress Hide login page Plugin <= 1.1.9 is vulnerable to Bypass Vulnerability

Software Hide login page Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-48335 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b14b2f707de8 Credits Naveen Muthusamy Required privilege...

CVE-2023-31075

Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...

CVE-2023-31075

Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...

CVE-2023-31075

CVE-2023-31075 is a CSRF vulnerability in WordPress plugin Easy Hide Login (

CVE-2023-31075 WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...

CVE-2023-31075: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8...