CVE-2024-34816

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

EUVD-2024-30581

Malicious code in bioql PyPI...

EUVD-2024-35081

Malicious code in bioql PyPI...

CVE-2024-32795

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

CVE-2013-4379

The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL...

PT-2025-1707 · Vcita · Contact Form/Calls To Action

Name of the Vulnerable Software and Affected Versions: Contact Form and Calls To Action by vcita plugin for WordPress versions up to, and including, 2.7.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' shortcode due to insufficient input...

CVE-2024-34816

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

CVE-2024-34816

CVE-2024-34816 is a CSRF vulnerability in the Revmakx WPCal.Io – Easy Meeting Scheduler WordPress plugin (WPCal.io) versions

PT-2024-26212 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a we...

WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34816 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 362a10aa888b Credits Maj...

CVE-2024-32795

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

CVE-2024-32795

CVE-2024-32795 describes a Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler. Connected sources indicate the issue affects the WPCal.Io – Easy Meeting Scheduler product and specifically cites versions from n/a through 0.9.5.8. The available documents do ...

PT-2024-24868 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32795 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 02396af8cd90 Credits Maj...

Make Meeting Scheduler - Critical - Unsupported - SA-CONTRIB-2019-087

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...

CVE-2013-4379

The Make Meeting Scheduler module for Drupal (6.x-1.x, affected prior to 6.x-1.3) allows remote attackers to bypass access restrictions by requesting a poll via the node URL instead of the hashed URL. Root cause: insufficient access validation when a poll is accessed directly through its node URL...