CVE-2024-31421

Missing Authorization vulnerability in Supsystic Popup by Supsystic.This issue affects Popup by Supsystic: from n/a through 1.10.27...

WordPress Plugin Ultimate Maps by Supsystic 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Ultimate Maps by Supsystic...

WordPress Popup by Supsystic Plugin <= 1.10.27 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.27 Fixed in 1.10.28 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31421 Patch priority Low CVSS severity Low 4.3 Developer Supsystic PSID 5734d7bec770 Credits Steven Julian Required...

WordPress Plugin Slider by Supsystic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Slider by Supsystic A...

PT-2024-23144 · Supsystic · Photo Gallery By Supsystic

Name of the Vulnerable Software and Affected Versions: Photo Gallery by Supsystic versions 1.15.16 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...

WordPress Plugin GDPR Cookie Consent by Supsystic Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin GDPR Cookie Consent by...

WordPress Digital Publications by Supsystic Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Digital Publications by Supsystic Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5756 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e77c5f3851ac Credits...

CVE-2023-5756

The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX...

WordPress Plugin Digital Publications by Supsystic Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Digital Publications by...

PT-2023-32305 · Supsystic · Digital Publications By Supsystic

Name of the Vulnerable Software and Affected Versions: Digital Publications by Supsystic plugin for WordPress versions up to, and including, 1.7.6 Description: The issue is due to missing or incorrect nonce validation on the AJAX action handler, making it possible for unauthenticated attackers to...

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Arbitrary File Download

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-46197 Patch priority Low CVSS severity Low 5.3 Developer Supsystic PSID deb6d3a6f13c Credits Rafshanzani Suhada Require...

CVE-2023-45068

Cross-Site Request Forgery CSRF vulnerability in Supsystic Contact Form by Supsystic plugin = 1.7.27 versions...

CVE-2023-45068

CVE-2023-45068 is a CSRF vulnerability in the Supsystic Contact Form by Supsystic plugin, affected versions

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-39997 Patch priority Low CVSS severity Low 5.3 Developer Supsystic PSID 6f37d18ff2b4 Credits Rafshanzani Suhada Required...

CVE-2023-22714

Cross-Site Request Forgery CSRF vulnerability in Supsystic Coming Soon by Supsystic plugin = 1.7.10 versions...

CVE-2023-22714 WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Supsystic Coming Soon by Supsystic plugin = 1.7.10 versions...

CVE-2023-22714

The CVE-2023-22714 entry concerns a CSRF vulnerability in the WordPress plugin “Coming Soon by Supsystic” (Supsystic Coming Soon) with affected versions listed as ≤ 1.7.10 (and related sources indicate up to 1.7.12 in PatchStack). The root issue is a CSRF flaw that could enable an attacker to tri...

CVE-2023-2528

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX actions vi...

Cross site request forgery (csrf)

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX actions vi...

CVE-2023-2528 Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated attackers to execute AJAX actions vi...