4 matches found
EUVD-2021-11166
Malware in sbrugna...
PT-2022-13217
Name of the Vulnerable Software and Affected Versions Sermon Browser WordPress plugin versions 0.45.22 and earlier Description The issue allows attackers to make a logged-in admin upload arbitrary files, such as PHP files, due to the lack of CSRF checks and file validation when uploading Sermon...
PT-2021-15865
Name of the Vulnerable Software and Affected Versions WP Login Security and History WordPress plugin versions prior to 1.1 Description The issue allows attackers to modify the plugin's settings to arbitrary values and set XSS payloads due to the lack of CSRF checks and sanitisation or validation ...
PT-2021-15870
Name of the Vulnerable Software and Affected Versions Content Copy Protection & Prevent Image Save WordPress plugin versions prior to 1.4 Description The issue allows attackers to make a logged-in administrator set arbitrary XSS payloads in the plugin's settings due to the lack of CSRF checks and...