11 matches found
CVE-2023-25029
Cross-Site Request Forgery CSRF vulnerability in utahta WP Social Bookmarking Light plugin = 2.0.7 versions...
CVE-2025-58853 WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Reflected XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through = 1.27...
CVE-2023-45062
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Thomas Scholl canvasio3D Light plugin = 2.4.6 versions...
WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin WP File Download Light versions = 1.3.3...
WordPress canvasio3D Light Plugin <= 2.5.0 is vulnerable to Broken Access Control
Software canvasio3D Light Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-48776 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID c7a418353e30 Credits Abdi Pranata Required...
CVE-2023-45062 WordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Thomas Scholl canvasio3D Light plugin = 2.4.6 versions...
CVE-2023-45062
CVE-2023-45062 affects the WordPress plugin canvasio3D Light. The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) in canvasio3D Light, with vulnerable versions reported as <= 2.4.6. The root cause is inadequate sanitization/escaping of input parameters before output, ...
CVE-2023-45102
Cross-Site Request Forgery CSRF vulnerability in OTWthemes Blog Manager Light plugin = 1.20 versions...
CVE-2023-25029
CVE-2023-25029 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Social Bookmarking Light by utahta, affected at versions
WordPress WP Social Bookmarking Light Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Social Bookmarking Light Type Plugin Vulnerable versions = 2.0.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25029 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID df3454428c26 Credits Mika...
WordPress Ultimate Widgets Light plugin <= 1.5.9.4 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Widgets Light plugin versions = 1.5.9.4. Solution No patched version available...