PT-2025-10058

Name of the Vulnerable Software and Affected Versions School Management System for Wordpress plugin versions up to, and including, 93.0.0 Description The issue allows unauthorized loss of data due to a missing capability check on the 'mj smgt remove feetype' and 'mj smgt remove category new' AJAX...

CVE-2016-5837: Undefined Security Weakness

WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors...

PT-2016-6705

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5.3 Description The issue allows remote attackers to bypass intended access restrictions and remove a category attribute from a post. Recommendations For versions prior to 4.5.3, update to version 4.5.3 or later t...

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Faq Maker - Multiple Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Cart Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...