CVE-2023-44996 WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

CVE-2023-44996

CVE-2023-44996 affects the WordPress plugin Post View Count (wp-simple-post-view) &lt;= 1.8.2. Described as a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered by an unauthenticated attacker, potentially allowing abuse of authenticated user actions. Public sources agree on CSR...

WordPress Plugin Post View Count Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

PT-2023-29339 · WordPress · Naresh Parmar Post View Count

Name of the Vulnerable Software and Affected Versions: Naresh Parmar Post View Count plugin versions 1.8.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

WordPress Post View Count Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Post View Count Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44996 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9ca3df3cf077 Credits Rio Darmawan Required...

Post Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC As a Contributor+ create a new post and...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2021-24605

The createpostpage AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 available to authenticated user does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue...

CVE-2021-24605

The CVE-2021-24605 entry concerns the WordPress plugin Custom Post View Generator (versions up to 0.4.6). The underlying issue is that the create_post_page AJAX action does not sanitize or escape user input before echoing it in the response, causing a Reflected Cross‑Site Scripting (XSS) vulnerab...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Custom Post View Generator, which stems...

Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

The createpostpage AJAX action of the plugin available to authenticated user does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue '...

Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

The createpostpage AJAX action of the plugin available to authenticated user does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue PoC...

Fehi CMS Cross-Site Scripting Vulnerability

FehiCMS is a Php-based CMS builder by Liufee Personal Developer. A cross-site scripting vulnerability exists in Fehi CMS 2.0.8. When a username is inserted as JavaScript code, viewing a post will trigger XSS...

CVE-2016-10980

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

CVE-2016-10982

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...

Cross site scripting

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kentopvcnumberslang, kentopvctodaytext, or kentopvctotaltext...

Cross site scripting

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kentopvcgeo...

Cross site request forgery (csrf)

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvcsettings CSRF...

CVE-2016-10982

The kento-post-view-counter WordPress plugin (up to version 2.8) has a CSRF vulnerability in wp-admin/admin.php?page=kentopvc_settings. This affects the plugin’s settings page and could enable unauthorized actions when a user interacts with the UI. The provided documents do not include a patch ve...

CVE-2016-10981

CVE-2016-10981 affects the kento-post-view-counter WordPress plugin (up to version 2.8). The vulnerability is stored XSS triggered through the fields kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. Attack context is network access with no required authentication and user in...