5 matches found
CVE-2026-64871
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...
CVE-2026-64871
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...
EUVD-2026-47896
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission...
PT-2026-63601
Administrator URL purges did not consistently require a valid token and cache-management permission...
CVE-2026-23694
CVE-2026-23694 affects Aruba HiSpeed Cache for WordPress before version 3.0.5. The flaw is a CSRF in multiple administrative AJAX actions (ahsc_reset_options, ahsc_debug_status, ahsc_enable_purge) where authentication and capability checks run, but WordPress nonces are not verified for state-chan...