OpenSTAManager Access Control Vulnerability

OpenSTAManager is an open-source management software for technical assistance and billing developed by Devcode. Versions of OpenSTAManager 2.9.8 and earlier contained a security vulnerability related to access control. This vulnerability stemmed from issues in modules/utenti/actions.php, which...

CVE-2018-1000507: Cross-Site Request Forgery (CSRF)

WP User Groups version 2.0.0 contains a Cross ite Request Forgery CSRF vulnerability in Settings page that can result in allows anybody to modify user groups and types. This attack appear to be exploitable via Admin must click on link. This vulnerability appears to have been fixed in 2.1.1...

PT-2018-9405

Name of the Vulnerable Software and Affected Versions WP User Groups versions 2.0.0 through 2.1.0 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Settings page, which can be exploited to modify user groups and types. This can occur when an Admin clicks o...