96 matches found
CVE-2021-36891 WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change
Cross-Site Request Forgery CSRF vulnerability in Photo Gallery by Supsystic plugin = 1.15.5 at WordPress allows changing the plugin settings...
CVE-2021-36890
Cross-Site Request Forgery CSRF vulnerability in Social Share Buttons by Supsystic plugin = 2.2.2 at WordPress...
CVE-2021-36890
Cross-Site Request Forgery CSRF vulnerability in Social Share Buttons by Supsystic plugin = 2.2.2 at WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Social Share Buttons by Supsystic plugin = 2.2.2 at WordPress...
CVE-2021-36890 WordPress Social Share Buttons by Supsystic plugin <= 2.2.2 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Social Share Buttons by Supsystic plugin = 2.2.2 at WordPress...
CVE-2021-46782
The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...
WordPress Ultimate Maps by Supsystic Plugin Cross-Site Scripting Vulnerability
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Ultimate Maps by Supsystic Plugin versions prior to 1.2.5. The vulnerability stems from the program not properly filtering tab parameters before outputting them to properties...
WordPress Maps by Supsystic 跨站脚本漏洞
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Ultimate Maps by Supsystic Plugin versions prior to 1.2.5. The vulnerability stems from the program not properly filtering tab parameters before outputting them to properties...
WordPress Digital Publications by Supsystic plugin <= 1.6.11 - Path Traversal and DoS vulnerability
Path Traversal and DoS vulnerability found by Erik David Martin in WordPress Digital Publications by Supsystic plugin versions = 1.6.11. Solution Update the WordPress Digital Publications by Supsystic plugin to the latest available version at least 1.6.12...
CVE-2020-12075
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions...
Design/Logic Flaw
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions...
CVE-2020-12075
The CVE pertains to the WordPress plugin Data Tables Generator by Supsystic prior to version 1.9.92, which lacks proper capability checks for AJAX actions. This creates an insecure permissions condition for AJAX endpoints in the plugin, as documented by NVD and corroborated by Red Hat and other s...
Pricing Table by Supsystic Cross-Site Scripting Vulnerability
WordPress plugin Pricing Table by Supsystic is used to create pricing tables easily. A cross-site scripting vulnerability exists in Pricing Table by Supsystic versions prior to 1.8.2. No details of the vulnerability are provided at this time...
Cross site request forgery (csrf)
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
Cross site request forgery (csrf)
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF...
Wordpress Popup By Supsystic plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in the Wordpress Popup By Supsystic plugin. Attackers can tric...