Lucene search
+L

4 matches found

Talos Blog
Talos Blog
•added 2023/11/09 1:00 p.m.•52 views

Spammers abuse Google Forms’ quiz to deliver scams

Spammers are exploiting the "Release scores" feature of Google Forms quizzes to deliver email. The emails originate from Googles own servers and consequently may have an easier time bypassing anti-spam protections and finding the victims inbox. Volumes of these messages hovered near noise levels...

7.1AI score
SaveExploits0
NVD
NVD
•added 2022/12/02 9:15 p.m.•26 views

CVE-2022-4219

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...

5.4CVSS0.00421EPSS
SaveExploits1References4
Prion
Prion
•added 2022/12/02 9:15 p.m.•29 views

Cross site request forgery (csrf)

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...

4.3CVSS4.3AI score0.00421EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/02 12:00 a.m.•4 views

CVE-2022-4219: Cross-Site Request Forgery (CSRF)

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...

5.4CVSS5.5AI score0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder