CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

CVE-2023-46023

CVE-2023-46023 affects Code-Projects Simple Task List 1.0. The vulnerability is a SQL injection in addTask.php caused by improper handling of the status parameter, allowing an attacker to obtain sensitive information. Public sources (e.g., Exploit DB and PacketStorm) provide a PoC and exploit det...

WordPress Simple 301 Redirects by BetterLinks Plugin <= 2.0.7 is vulnerable to Broken Access Control

Software Simple 301 Redirects by BetterLinks Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47761 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 76b78ec76a84 Credits Abd...

CVE-2023-29440

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board plugin = 2.10.3 versions...

CVE-2023-29440

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board plugin = 2.10.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board plugin = 2.10.3 versions...

CVE-2023-29440 WordPress Simple Job Board plugin <= 2.10.3 - Cross Site Request Forgery (CSRF)

A vulnerability in PressTigers Simple Job Board simple-job-board.This issue affects Simple Job Board: from n/a through = 2.10.3...

CVE-2023-29440 WordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board plugin = 2.10.3 versions...

CVE-2023-29440

CVE-2023-29440 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Simple Job Board (PressTigers) versions &lt;= 2.10.3. The issue is triggered by unauthenticated CSRF actions (sjb_save_settings_section) that could permit state-changing requests without user intent, as documente...

WordPress Plugin Simple Job Board Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2023-31086

Cross-Site Request Forgery CSRF vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin = 2.46.0 versions...

CVE-2023-31086

Cross-Site Request Forgery CSRF vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin = 2.46.0 versions...

CVE-2023-31086

CVE-2023-31086 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Simple Giveaways (Igor Benic) versions

CVE-2023-36688

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Mann Simple Site Verify plugin = 1.0.7 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Mann Simple Site Verify plugin = 1.0.7 versions...

CVE-2023-36688 WordPress Simple Site Verify Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Michael Mann Simple Site Verify plugin = 1.0.7 versions...

CVE-2023-36688

CVE-2023-36688 affects WordPress Simple Site Verify plugin (versions

PT-2023-25681 · Michael Mann · Simple Site Verify Plugin

Name of the Vulnerable Software and Affected Versions: Michael Mann Simple Site Verify plugin versions 1.0.7 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.0.7 an...

Simple Site Verify < 1.0.8 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...