PT-2019-18348

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.5.8 and earlier, 11.6.x before 11.6.6, 11.7.x before 11.7.1 Description The issue allows information disclosure, where users without project permissions may receive emails after a project mov...

CVE-2019-6789: Improper Privilege Management

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 4 of 6. In some cases, users without project permissions will receive emails after a project move. For private projects, this wi...

CVE-2019-11545: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Information Disclosure. When an issue is moved to a private project, the private project namespace is leaked to unauthorized users with access to the original issue...

WordPress bbp-move-topics plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bbp-move-topics is a theme post migration plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

WordPress bbp-move-topics plugin injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bbp-move-topics is a theme post migration plugin used in it. The WordPress bbp-move-topics plugin suffers from an injection...

CVE-2018-21006

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

CVE-2018-21005

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...

CVE-2018-21006

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

CVE-2018-21005

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...

Cross site request forgery (csrf)

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

Code injection

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...

CVE-2018-21006

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

CVE-2018-21006

CVE-2018-21006 affects the WordPress plugin bbp-move-topics prior to version 1.1.6. The vulnerability is a CSRF flaw that could allow an attacker to cause unintended requests/actions on behalf of an authenticated user. The root cause is CSRF in the bbp-move-topics plugin, as documented in multipl...

CVE-2018-21006

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

CVE-2018-21005

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...

CVE-2018-21005

The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...

CVE-2018-21005

The affected software is the WordPress plugin bbp-move-topics, prior to version 1.1.6. The vulnerability is a code injection issue in the plugin. The connected sources confirm the name, affected component, and root cause, but do not provide explicit exploitation details or a published remediation...

CVE-2018-21006: Cross-Site Request Forgery (CSRF)

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

PT-2019-10432

Name of the Vulnerable Software and Affected Versions bbp-move-topics plugin versions prior to 1.1.6 Description The issue concerns code injection in the bbp-move-topics plugin for WordPress. Recommendations For versions prior to 1.1.6, update to version 1.1.6 or later to resolve the issue...

PT-2019-10433

Name of the Vulnerable Software and Affected Versions bbp-move-topics plugin versions prior to 1.1.6 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.1.6, update to version 1.1.6 or later to resolve the issue...