CVE-2023-48283

CVE-2023-48283 affects the WordPress plugin Simple Testimonials Showcase (PressTigers) up to version 1.1.5. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited by unauthenticated attackers to trigger actions on behalf of site admins. Public sources concur this is a CSRF...

CVE-2023-48283 WordPress Simple Testimonials Showcase Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

WordPress Plugin Simple Testimonials Showcase Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-30758 · Unknown · Simple Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: Simple Testimonials Showcase versions 1.1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.1.5 and earlier, update to a version...

CVE-2023-48283: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5...

WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48283 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 964d38648042 Credits Nguyen...

CVE-2023-32957

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

CVE-2023-32957

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

CVE-2023-32957

CVE-2023-32957 concerns the WordPress plugin Team Members Showcase by Dazzlersoft, affected in versions &lt;= 1.3.4. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw, exploitable by an administrator or higher privileges via admin settings. Multiple sources corroborate ...

CVE-2023-32957 WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

WordPress Plugin Team Members Showcase Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-32957: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dazzlersoft Team Members Showcase plugin = 1.3.4 versions...

PT-2023-24099

Name of the Vulnerable Software and Affected Versions Dazzlersoft Team Members Showcase plugin versions prior to 1.3.4 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker t...

WordPress WP Logo Showcase Responsive Slider and Carousel Plugin <= 3.6 is vulnerable to Broken Access Control

Software WP Logo Showcase Responsive Slider and Carousel Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 6513d49257c3...

WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Team Members Showcase Type Plugin Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32957 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8f4be40a02eb Credits Emili Castells...

CVE-2023-5639

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

Cross site scripting

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2023-5639

The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2023-5639

CVE-2023-5639 affects the WordPress plugin Team Showcase. The vulnerability is a Stored XSS via the plugin shortcode tmfshortcode in all versions up to 2.1 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires an authenticated attacker with contribut...