Sumo < 1.35 - Cross-Site Request Forgery

Description The Sumo plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.34. This is due to missing or incorrect nonce validation on the ajaxsumoaddwoocommercecoupon and ajaxsumoremovewoocommercecoupon functions. This makes it possible for...

WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Friday Patchstack Alliance in WordPress Plugin Sumo versions = 1.34...

WordPress Sumo Plugin <= 1.34 is vulnerable to Cross Site Request Forgery (CSRF)

Software Sumo Type Plugin Vulnerable versions = 1.34 Fixed in 1.35 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31265 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 72714bd87fe9 Credits Friday Required privilege...

CVE-2023-25033

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

CVE-2023-25033

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

CVE-2023-25033

CVE-2023-25033 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Social Share Boost (also referred to as Sumo Social Share Boost) for versions 4.5 or apply vendor advisories as available in the provided sources.

PT-2023-19884 · WordPress · Sumo Social Share Boost

Name of the Vulnerable Software and Affected Versions: Sumo Social Share Boost plugin versions = 4.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

CVE-2023-25044

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-25044

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-25044

CVE-2023-25044 affects the WordPress plugin Sumo Social Share Boost (versions

CVE-2023-25044 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-25044 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

PT-2023-19892 · WordPress · Sumo Social Share Boost

Name of the Vulnerable Software and Affected Versions: Sumo Social Share Boost plugin versions = 4.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Sumo Social Share Boost plugin versio...

WordPress Ultimate Divi Modules Suite – Divi Sumo Lite Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Divi Modules Suite – Divi Sumo Lite Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5acd9c422d26 Credits Rafie...

CVE-2023-23688

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-23688

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-23688 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

CVE-2023-23688 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...