CVE-2024-50534

CVE-2024-50534 – WordPress World Prayer Time plugin

WordPress plugin World Prayer Time 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-34312 · Unknown · World Prayer Time

Name of the Vulnerable Software and Affected Versions: World Prayer Time versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

WordPress World Prayer Time plugin <= 2.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin World Prayer Time versions = 2.0...

WordPress World Prayer Time Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software World Prayer Time Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-50534 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID c482db8f0a37 Credits SOPROBRO Required...

CVE-2024-8621

The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'maxword' attribute of the 'quranverse' shortcode in all versions up to, and including, 2024.08.26 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2024-8621 Daily Prayer Time <= 2024.08.26 - Authenticated (Contributor+) SQL Injection

The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'maxword' attribute of the 'quranverse' shortcode in all versions up to, and including, 2024.08.26 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

WordPress plugin Daily Prayer Time SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

WordPress Daily Prayer Time plugin <= 2024.08.26 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin Daily Prayer Time versions = 2024.08.26...

PT-2024-39136 · WordPress · Daily Prayer Time

Name of the Vulnerable Software and Affected Versions: Daily Prayer Time plugin for WordPress versions up to, and including, 2024.08.26 Description: The issue arises from insufficient escaping on the user-supplied max word attribute of the quran verse shortcode and lack of sufficient preparation ...

WordPress Daily Prayer Time Plugin <= 2024.08.26 is vulnerable to SQL Injection

Software Daily Prayer Time Type Plugin Vulnerable versions = 2024.08.26 Fixed in 2024.09.14 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-8621 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID bdae70687f12 Credits Krzysztof Zając Required privilege...

WordPress Muslim Prayer Time BD plugin <= 2.4 - Settings Reset via CSRF vulnerability

Settings Reset via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Muslim Prayer Time BD versions = 2.4...

CVE-2024-4758

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-4758

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-4758 Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-4758

CVE-2024-4758 affects the Muslim Prayer Time BD WordPress plugin up to version 2.4. The root cause is a missing CSRF check when resetting plugin settings, enabling a CSRF attack to reset settings by a logged-in admin. Public sources from Red Hat and Patchstack corroborate versions before 2.5 and ...

PT-2024-32662 · WordPress · Muslim Prayer Time Bd

Name of the Vulnerable Software and Affected Versions: Muslim Prayer Time BD WordPress plugin versions prior to 2.5 Description: The issue concerns the lack of a CSRF check when resetting settings, which could allow attackers to make a logged-in admin reset them via a CSRF attack. Recommendations...

WordPress Plugin Muslim Prayer Time BD Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Muslim Prayer Time BD Plugin <= 2.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Muslim Prayer Time BD Type Plugin Vulnerable versions = 2.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4758 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ee80ee2ae4c1 Credits Bob Matyas Require...

WordPress Nafeza Prayer Time Plugin Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...