WordPress Disable WordPress Update Notifications Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Disable WordPress Update Notifications Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-34029 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e625eff02d6e...

CVE-2023-32964

Cross-Site Request Forgery CSRF vulnerability in Made with Fuel Better Notifications for WP plugin = 1.9.2 versions...

CVE-2023-32964

Cross-Site Request Forgery CSRF vulnerability in Made with Fuel Better Notifications for WP plugin = 1.9.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Made with Fuel Better Notifications for WP plugin = 1.9.2 versions...

CVE-2023-32964 WordPress Better Notifications for WP Plugin <= 1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Made with Fuel Better Notifications for WP plugin = 1.9.2 versions...

CVE-2023-32964

CVE-2023-32964: A CSRF vulnerability in the WordPress plugin Better Notifications for WP (Made with Fuel) affects versions

PT-2023-24104 · WordPress · Better Notifications For Wp

Name of the Vulnerable Software and Affected Versions: Made with Fuel Better Notifications for WP plugin versions 1.9.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

WordPress plugin Customize WordPress Emails and Alerts – Better Notifications for WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

The vulnerability of Firefox and Firefox ESR browsers stems from the absence of a delay in pop-up notifications, which allows attackers to gain unauthorized access to certain browser functions.

The vulnerability of Firefox and Firefox ESR browsers exists due to the absence of a delay in pop-up notifications. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to certain functions of the browser...

May 23, 2023—KB5026435 (OS Build 19045.3031) Preview

None None...

CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctwebserver binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns...

CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctwebserver binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns...

CVE-2023-33244

Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...

Design/Logic Flaw

Obsidian before 1.2.2 allows calls to unintended APIs for microphone access, camera access, and desktop notification via an embedded web page...

PT-2023-24240 · Obsidian · Obsidian

Name of the Vulnerable Software and Affected Versions: Obsidian versions prior to 1.2.2 Description: The issue allows calls to unintended APIs, including those for microphone access, camera access, and desktop notification, via an embedded web page. Recommendations: For versions prior to 1.2.2,...

AlmaLinux 8 : thunderbird (ALSA-2023:3221)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:3221 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofin...

Mozilla: Potential permissions request bypass via clickjacking

The Mozilla Foundation Security Advisory describes this flaw as: A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions...

WordPress Better Notifications for WP Plugin <= 1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Better Notifications for WP Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32964 Patch priority Low CVSS severity Low 4.3 Developer Made with Fuel Ltd. PSID 72f7e05deec7 Credits...

Rocky Linux 8 : thunderbird (RLSA-2023:3221)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3221 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and...

Rocky Linux 8 : firefox (RLSA-2023:3220)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3220 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and...