10 matches found
EUVD-2023-49318
Malicious code in bioql PyPI...
CVE-2023-44996
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996 WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996
CVE-2023-44996 affects the WordPress plugin Post View Count (wp-simple-post-view) <= 1.8.2. Described as a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered by an unauthenticated attacker, potentially allowing abuse of authenticated user actions. Public sources agree on CSR...
PT-2023-29339 · WordPress · Naresh Parmar Post View Count
Name of the Vulnerable Software and Affected Versions: Naresh Parmar Post View Count plugin versions 1.8.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
WordPress Plugin Post View Count Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...
WordPress Post View Count Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Post View Count Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44996 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9ca3df3cf077 Credits Rio Darmawan Required...
Post Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC As a Contributor+ create a new post and...