Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5119 matches found

Prion
Prion•added 2023/06/14 2:15 a.m.•27 views

Cross site request forgery (csrf)

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS4.3AI score0.00316EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•18 views

CVE-2023-3198 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS6.5AI score0.00316EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•12 views

CVE-2023-3200 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS6.5AI score0.00316EPSS
SaveExploits0References3
CVE
CVE•added 2023/06/14 1:47 a.m.•54 views

CVE-2023-3200

CVE-2023-3200 affects the WordPress MStore API plugin prior to 3.9.7 (

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2023/06/14 1:47 a.m.•30 views

CVE-2023-3200 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatenewordermessage function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site...

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2023/06/14 1:47 a.m.•32 views

CVE-2023-3198 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatestatusordermessage function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site...

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References3
CVE
CVE•added 2023/06/14 1:47 a.m.•67 views

CVE-2023-3198

The CVE-2023-3198 entry refers to the MStore API WordPress plugin (

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/06/14 1:47 a.m.•15 views

CVE-2023-3203 MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS6.5AI score0.00316EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2023/06/14 1:47 a.m.•41 views

CVE-2023-3203 MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstoreupdatelimitproduct function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a...

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References3
CVE
CVE•added 2023/06/14 1:47 a.m.•63 views

CVE-2023-3203

CVE-2023-3203 affects the WordPress plugin MStore API (versions

4.3CVSS4.6AI score0.00316EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies•added 2023/06/14 12:00 a.m.•10 views

PT-2023-23564 · WordPress · Mstore Api

Name of the Vulnerable Software and Affected Versions: MStore API plugin for WordPress affected versions not specified Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation on the mstore update new order message function. This allows unauthenticated...

4.3CVSS5.2AI score0.00316EPSS
SaveExploits0References6
NVD
NVD•added 2023/06/13 2:15 a.m.•16 views

CVE-2023-2563

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect nonce validation on the function accuaformsformeditaction. This makes it possible for unauthenticated attackers to...

4.3CVSS4.2AI score0.00298EPSS
SaveExploits0References3
NVD
NVD•added 2023/06/13 2:15 a.m.•27 views

CVE-2023-2277

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...

6.1CVSS5.9AI score0.00337EPSS
SaveExploits1References3
OSV
OSV•added 2023/06/13 2:15 a.m.•8 views

CVE-2023-2277

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...

4.7CVSS5.6AI score
SaveExploits0References3
Prion
Prion•added 2023/06/13 2:15 a.m.•22 views

Cross site request forgery (csrf)

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect nonce validation on the function accuaformsformeditaction. This makes it possible for unauthenticated attackers to...

4.3CVSS4.3AI score0.00298EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2023/06/13 2:15 a.m.•24 views

Cross site request forgery (csrf)

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...

4.3CVSS4.5AI score0.00337EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment•added 2023/06/13 1:48 a.m.•14 views

CVE-2023-2563 WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect nonce validation on the function accuaformsformeditaction. This makes it possible for unauthenticated attackers to...

4.3CVSS6.5AI score0.00298EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2023/06/13 1:48 a.m.•29 views

CVE-2023-2563 WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect nonce validation on the function accuaformsformeditaction. This makes it possible for unauthenticated attackers to...

4.3CVSS4.6AI score0.00298EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2023/06/13 1:48 a.m.•38 views

CVE-2023-2277 WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...

6.1CVSS6.1AI score0.00337EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment•added 2023/06/13 1:48 a.m.•12 views

CVE-2023-2277 WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the 'insert' function. This makes it possible for unauthenticated attackers to update the plugin's settings and...

6.1CVSS5.8AI score0.00337EPSS
SaveExploits1References3
Rows per page
Query Builder