WordPress Rate my Post - WP Rating System Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

PT-2022-23620 · Connectwise · Connectwise Screenconnect

Name of the Vulnerable Software and Affected Versions: ConnectWise ScreenConnect versions 22.6 and below Description: The issue allows potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this to gain...

Users cannot use mintWithSignature() function in most cases

Lines of code Vulnerability details Impact Function sfrxETH.mintWithSignature allows users to approve and mint in one transaction. Users will provide input param shares and function will calculate what assets amount needed to be approved in case approveMax = false. uint256 amount = approveMax ?...

CVE-2022-40671

Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...

CVE-2022-40310

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40671

Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...

CVE-2022-40310

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

Race condition

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310

CVE-2022-40310 affects the WordPress plugin Rate my Post – WP Rating System (versions

CVE-2022-40671 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...

CVE-2022-40671

CVE-2022-40671 : In WordPress, the Rate my Post – WP Rating System plugin (versions ≤ 3.3.4) contains a CSRF vulnerability due to insufficient request validation in certain actions, allowing an attacker to trick authenticated users into performing unintended actions. The affected component is the...

WordPress plugin Rate my Post – WP Rating System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

WordPress plugin Rate my Post – WP Rating System 竞争条件问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2022-25469 · WordPress · Rate My Post – Wp Rating System

Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System plugin versions = 3.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

No rate limit on old password parameter allows attacker to bruteforce the existing password and set a new password

Description There is no rate limit on the password change feature on https://rdiffweb-demo.ikus-soft.com/prefs/general which allows an attacker to bruteforce the old password and set a new password for the account Proof of Concept 1 Go to https://rdiffweb-demo.ikus-soft.com/prefs/general 2 Here y...

Yelp: No rate limit on subscribe form

Summary: Hi team, I found that you missing a rate limit protection for subscribe form Platforms Affected: https://business.yelp.com/?source=consumersiteheader&utmcontent=header&utmmedium=www&utmsource=conshome Steps To Reproduce: 1. go to...

CVE-2022-35995

TensorFlow is an open source platform for machine learning. When AudioSummaryV2 receives an input samplerate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

GHSA-G9H5-VR8M-X2H4 TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2`

Impact When AudioSummaryV2 receives an input samplerate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg0='' arg1=tf.random.uniformshape=1,1, dtype=tf.float32, maxval=None arg2=tf.random.uniformshape=2,1,...