3 matches found
PT-2026-45043
Name of the Vulnerable Software and Affected Versions Admidio versions 5.0.9 through 5.0.9 Description An incomplete fix in the inventory module allows any authenticated user to permanently delete non-system inventory fields. The issue exists because the field delete handler in...
CVE-2019-15779
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...
PT-2019-14388
Name of the Vulnerable Software and Affected Versions insta-gallery plugin versions prior to 2.4.8 Description The issue concerns the lack of nonce validation for certain actions. Specifically, it affects the qligg dismiss notice and qligg form item delete actions, which can be exploited due to t...