WordPress Woody ad snippets plugin security feature issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Woody ad snippets is used in one of the pages to add ads to the plugin. The WordPress Woody ad snippets plugin has a security signature...

Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion

The adminInit function of the admin/includes/class.actions.snippets.php file, registered as an admininit hook did not have any CSRF or capability checks for its close action, allowing unauthenticated users to delete arbitrary posts from the blog...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

Arbitrary file deletion

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

CVE-2019-14773

CVE-2019-14773 affects the WordPress Woody Ad Snippets plugin up to version 2.2.5. The admin_init hook in admin/includes/class.actions.snippets.php lacked CSRF or capability checks for the close action, enabling unauthenticated users to delete arbitrary posts via wp-admin/admin-post.php?action=cl...

CVE-2019-14773: Undefined Security Weakness

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion...

PT-2019-13825

Name of the Vulnerable Software and Affected Versions Woody ad snippets plugin versions prior to 2.2.6 Description The issue concerns the "Woody ad snippets" plugin for WordPress, where a problem in the admin/includes/class.actions.snippet.php file allows unauthorized post deletion through the...

WordPress Woody Ad Snippets plugin <= 2.2.4 - Unauthenticated stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated stored Cross-Site Scripting XSS vulnerability found by Jerome Bruandet Nintechnet by WordPress Woody Ad Snippets plugin versions = 2.2.4. Solution Update the WordPress Woody Ad Snippets plugin to the latest available version at least 2.2.5...

Woody Ad Snippets <= 2.2.4 - Multiple issues leading to RCE

Unauthenticated options import and unauthenticated stored XSS issues which could lead to Remote Code Execution...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-23999)

Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Snippets in Frog CMS version 1.1. The vulnerability stems...

CVE-2019-1010235

Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...

CVE-2019-1010235

Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...

Cross site scripting

Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...

CVE-2019-1010235

Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...

CVE-2019-1010235: Improper Neutralization of Input During Web Page Generation

Frog CMS 1.1 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing, Alert pop-up on page, Redirecting to another phishing site, Executing browser exploits. The component is: Snippets...

PT-2019-11522

Name of the Vulnerable Software and Affected Versions: Frog CMS version 1.1 Description: The issue affects the Snippets component, allowing for Cross Site Scripting XSS attacks. This can lead to several impacts, including cookie stealing, displaying alert pop-ups on the page, redirecting users to...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Ability to Write a Note to a Private Snippet Recent Pipeline Information Disclosed to Unauthorised Users Resource Exhaustion Attack Error Caused by Encoded Characters in Comments Authorization Issues in GraphQL Number of Merge Requests was Accessible Enabling One of the Service...

CVE-2019-12826

A Cross-Site-Request-Forgery CSRF vulnerability in widgetlogic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets that are attached to widgets and then eval'd to dynamically determine their visibility by crafting a maliciou...