Lucene search
+L

4868 matches found

OSV
OSV
added 2024/04/11 1:15 p.m.8 views

CVE-2024-32106

Cross-Site Request Forgery CSRF vulnerability in WP Compress WP Compress – Image Optimizer All-In-One.This issue affects WP Compress – Image Optimizer All-In-One: from n/a through 6.10.35...

8.8CVSS5.8AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/11 1:0 p.m.65 views

CVE-2024-32106

CVE-2024-32106 is a CSRF vulnerability in the WordPress plugin WP Compress – Image Optimizer (All-In-One) . Connected documents confirm the issue affects versions up to 6.10.35 . The available sources describe the vulnerability as CSRF with no publicly documented exploit details in the provided m...

8.8CVSS5.1AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/11 1:0 p.m.23 views

CVE-2024-32106 WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Compress WP Compress – Image Optimizer All-In-One.This issue affects WP Compress – Image Optimizer All-In-One: from n/a through 6.10.35...

4.3CVSS5AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/11 1:0 p.m.15 views

CVE-2024-32106 WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Compress WP Compress – Image Optimizer All-In-One.This issue affects WP Compress – Image Optimizer All-In-One: from n/a through 6.10.35...

4.3CVSS5.1AI score0.00227EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.18 views

WordPress WP Compress – Image Optimizer [All-In-One] Plugin <= 6.10.35 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Compress – Image Optimizer All-In-One Type Plugin Vulnerable versions = 6.10.35 Fixed in 6.11.01 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32106 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ae0be74f8a...

4.3CVSS6.6AI score0.00227EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/11 12:0 a.m.8 views

PT-2024-24412 · WordPress · Wp Compress – Image Optimizer [All-In-One]

Name of the Vulnerable Software and Affected Versions: WP Compress – Image Optimizer All-In-One versions n/a through 6.10.35 Description: A Cross-Site Request Forgery CSRF issue affects the specified software. This type of issue allows an attacker to perform unintended actions on a web applicatio...

8.8CVSS6.6AI score0.00227EPSS
SaveExploits0References6
NVD
NVD
added 2024/04/10 1:51 p.m.21 views

CVE-2024-31924

Cross-Site Request Forgery CSRF vulnerability in nosilver4u EWWW Image Optimizer ewww-image-optimizer.This issue affects EWWW Image Optimizer: from n/a through = 7.2.3...

4.3CVSS4.6AI score0.00253EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/10 1:2 p.m.15 views

CVE-2024-31924 WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in nosilver4u EWWW Image Optimizer ewww-image-optimizer.This issue affects EWWW Image Optimizer: from n/a through = 7.2.3...

4.3CVSS5.1AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/10 1:2 p.m.60 views

CVE-2024-31924

CVE-2024-31924 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin EWWW Image Optimizer. Affected versions are 7.2.3 and earlier (listed as from n/a through 7.2.3). Public references indicate a remediation in version 7.3.0 (VendorFix), implying users should upgrade...

4.3CVSS5.9AI score0.00253EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/10 1:2 p.m.29 views

CVE-2024-31924 WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in nosilver4u EWWW Image Optimizer ewww-image-optimizer.This issue affects EWWW Image Optimizer: from n/a through = 7.2.3...

4.3CVSS4.9AI score0.00253EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/10 12:59 p.m.10 views

WordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin EWWW Image Optimizer versions = 7.2.3...

4.3CVSS7AI score0.00253EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/04/10 5:15 a.m.5 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2024/04/10 5:15 a.m.46 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS6.5AI score0.00225EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/04/10 5:0 a.m.37 views

CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

6.7AI score0.00225EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/04/10 5:0 a.m.18 views

CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

6.8AI score0.00225EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.11 views

PT-2024-24287 · Unknown · Ewww Image Optimizer

Name of the Vulnerable Software and Affected Versions: EWWW Image Optimizer versions through 7.2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in the EWWW Image Optimizer. This type of vulnerability allows an attacker to trick a user into performing unintended action...

4.3CVSS6.5AI score0.00253EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.10 views

PT-2024-14945 · WordPress · Wordpress Ping Optimizer

Name of the Vulnerable Software and Affected Versions: WordPress Ping Optimizer plugin versions through 2.35.1.3.0 Description: The issue concerns the lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unwanted actions, such as clearing...

4.3CVSS6.2AI score0.00225EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.9 views

WordPress plugin Ping Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.7AI score0.00225EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2024/04/10 12:0 a.m.10 views

WordPress EWWW Image Optimizer Plugin <= 7.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software EWWW Image Optimizer Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31924 Patch priority Low CVSS severity Low 4.3 Developer Exactly WWW LLC PSID f9db1d12e38a Credits Dhabaleshwar D...

4.3CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.6 views

WordPress Plugin EWWW Image Optimizer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.5AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder