Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-24899

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00513EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:31 p.m.2 views

CVE-2022-1610

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.5AI score0.00513EPSS
Exploits2References1
CNVD
CNVD
added 2022/06/22 12:0 a.m.18 views

WordPress Seamless Donations plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Seamless Donations plugin versions prior to 5.1.9 are vulnerable to cross-site request...

6.5CVSS1.5AI score0.00513EPSS
Exploits2References1
OSV
OSV
added 2022/06/20 11:15 a.m.3 views

CVE-2022-1610

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00513EPSS
Exploits2References1
NVD
NVD
added 2022/06/20 11:15 a.m.15 views

CVE-2022-1610

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00513EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/06/20 11:15 a.m.5 views

CVE-2022-1610

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.6AI score0.00513EPSS
Exploits2References2
Prion
Prion
added 2022/06/20 11:15 a.m.14 views

Cross site request forgery (csrf)

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS6.3AI score0.00513EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/06/20 10:25 a.m.18 views

CVE-2022-1610 Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF

The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.6AI score0.00513EPSS
Exploits2References1
CVE
CVE
added 2022/06/20 10:25 a.m.77 views

CVE-2022-1610

CVE-2022-1610 affects the WordPress plugin Seamless Donations (versions before 5.1.9). The root cause is a missing CSRF check when updating settings, which could let a logged-in attacker perform a CSRF attack to change settings. Public references (NVD, RH, CNVD, CVE lists) corroborate the vulnera...

6.5CVSS6.3AI score0.00513EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.3 views

WordPress plugin Seamless Donations 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Seamless Donations plugin versions prior to 5.1.9 are vulnerable to cross-site request...

6.5CVSS5.5AI score0.00513EPSS
Exploits2References2
Patchstack
Patchstack
added 2022/05/26 12:0 a.m.14 views

WordPress Seamless Donations plugin <= 5.1.8 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Daniel Ruf in WordPress Seamless Donations plugin versions = 5.1.8. Solution Update the WordPress Seamless Donations plugin to the latest available version at least 5.1.9...

6.5CVSS4.2AI score0.00513EPSS
Exploits2References1Affected Software1
wpexploit
wpexploit
added 2022/05/26 12:0 a.m.145 views

Seamless Donations < 5.1.9 - Arbitrary Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit; Some link: https://google.com input type="text" name="dgxdonateemailanon" value="You have requested th...

6.5CVSS0.4AI score0.00513EPSS
Exploits2
Rows per page
Query Builder