PT-2023-30551 · Unknown · Code Snippets

Name of the Vulnerable Software and Affected Versions: Code Snippets versions n/a through 3.5.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Code Snippets Pro Code Snippets. This type of vulnerability allows an attacker to trick a user into performing unintended...

WordPress Plugin Code Snippets Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Code Snippets Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.6.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47666 Patch priority Low CVSS severity Low 4.3 Developer Code Snippets Pro PSID 3f0e2c5bc521 Credits Huynh Tien Si...

CVE-2020-36759

The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the runActions function. This makes it possible for unauthenticated attackers to activate and deactivate snippe...

CVE-2021-4418

The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save code snippets via a forged...

Cross site request forgery (csrf)

The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save code snippets via a forged...

Cross site request forgery (csrf)

The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the runActions function. This makes it possible for unauthenticated attackers to activate and deactivate snippe...

CVE-2020-36759

CVE-2020-36759 concerns the Woody code snippets plugin for WordPress. Affected: WordPress plugin “ Woody code snippets” (versions up to and including 2.3.9). Root cause: missing or incorrect nonce validation in the runActions() function enables CSRF. Impact: unauthenticated attackers could activa...

WordPress Plugin Woody code snippets Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Events Rich Snippets for Google Plugin <= 1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Events Rich Snippets for Google Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44478 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID cd6a8e204b56 Credits Mika...

SAP BusinessObjects Business Intelligence Platform Security Vulnerability

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

PT-2023-25992 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Version Management System version 403 Description: The issue is due to the lack of validation, which allows an unauthenticated user to read code snippets through the UI. This results in a low...

CVE-2023-25459

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

CVE-2023-25459

CVE-2023-25459 affects the WordPress plugin Post Snippets (Postsnippets) up to v4.0.2. It is an admin-authenticated stored XSS via the snippet_content field; patch to v4.0.3. CVSS/impact details vary by source (NVD/Wordfence/Patchstack report low-to-medium risk; documented exploitation not provid...

CVE-2023-25459 WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Postsnippets Post Snippets plugin = 4.0.2 versions...

WordPress plugin Post Snippets - Custom WordPress Code Snippets Customizer Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Post Snippets - Custom...

WordPress Post Snippets Plugin < 4.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Post Snippets Type Plugin Vulnerable versions 4.0.4 Fixed in 4.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e4d64cbe7635 Credits Rafie Muhammad Patchstack Required...

WordPress Easy Code Snippets Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Easy Code Snippets Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 282dfece7848 Credits Rafie Muhammad Patchstack...

WordPress Easy Schema - Structured Data & Rich Snippets Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Easy Schema - Structured Data & Rich Snippets Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d25737c70298 Credits...