6 matches found
PT-2025-10058
Name of the Vulnerable Software and Affected Versions School Management System for Wordpress plugin versions up to, and including, 93.0.0 Description The issue allows unauthorized loss of data due to a missing capability check on the 'mj smgt remove feetype' and 'mj smgt remove category new' AJAX...
PT-2016-6705
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5.3 Description The issue allows remote attackers to bypass intended access restrictions and remove a category attribute from a post. Recommendations For versions prior to 4.5.3, update to version 4.5.3 or later t...
CVE-2016-5837: Undefined Security Weakness
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors...
Ez Cart Cross Site Request Forgery
----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...
Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities
Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...
Ez Faq Maker - Multiple Vulnerabilities
----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...