CVE-2024-0906

The fx Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the API. This makes it possible for unauthenticated attackers to obtain page and post contents of a site protected with this plugin...

WordPress My Private Site Plugin <= 3.0.14 is vulnerable to Broken Access Control

Software My Private Site Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.1.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-0978 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 43919902c5ab Credits Francesco Carlucci Required...

WordPress My Private Site plugin <= 3.0.7 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress My Private Site plugin versions = 3.0.7. Solution Update the WordPress My Private Site plugin to the latest available version at least 3.0.8...