660 matches found
CVE-2020-9393
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...
CVE-2020-9394
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
CVE-2020-9394
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
CVE-2020-9393
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS...
Cross site request forgery (csrf)
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF...
CVE-2020-9394
CVE-2020-9394 corresponds to a CSRF vulnerability in the WordPress plugin Pricing Table by Supsystic, versions prior to 1.8.2. The issue enables cross-site requests to perform unauthorized actions within the plugin’s AJAX/endpoints (e.g., ImportJSONTable, createFromTpl, getJSONExportTable) due to...
CVE-2020-9393
CVE-2020-9393 concerns the WordPress plugin Pricing Table by Supsystic (versions before 1.8.2). A cross-site scripting vulnerability exists in this plugin, allowing an attacker to inject/execute arbitrary scripts via user-supplied input. The NVD and multiple feeds corroborate that the issue is ti...
Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS
No permission check on the ImportJSONTable endpoint allows for malicious javascript to be injected by unauthenticated users. PoC...
Pricing Table by Supsystic < 1.8.1 - Cross-Site Request Forgery to XSS and Setting Changes
CSRF can be exploited against any of the functionalities in the Pricing Table by Supsystic WordPress plugin in vulnerable versions. One example:...
Pricing Table by Supsystic < 1.8.2 - Insecure Permissions on AJAX Actions
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or...
Pricing Table by Supsystic < 1.8.1 - Cross-Site Request Forgery to XSS and Setting Changes
CSRF can be exploited against any of the functionalities in the Pricing Table by Supsystic WordPress plugin in vulnerable versions. PoC One example:...
Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS
No permission check on the ImportJSONTable endpoint allows for malicious javascript to be injected by unauthenticated users...
WordPress gallery-by-supsystic plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gallery-by-supsystic is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...
CVE-2016-10918
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF...
CVE-2016-10918
CVE-2016-10918 affects the WordPress gallery-by-supsystic plugin prior to version 1.8.6. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in this plugin, with the root cause described across connected documents as insufficient verification of request origin. Impact is described as P...
WordPress popup-by-supsystic plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. popup-by-supsystic is a web window popup plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...
CVE-2016-10915
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF...
CVE-2016-10915
The CVE-2016-10915 entry concerns the WordPress plugin Popup by Supsystic, specifically vulnerable in versions before 1.7.9. The issue is a Cross-Site Request Forgery (CSRF) flaw in the plugin, as documented by multiple sources (NVD entry for CVE-2016-10915 and Red Hat advisory). Affected compone...
WordPress newsletter-by-supsystic plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newsletter-by-supsystic is a newsletter form plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...