EUVD-2023-32331

Malicious code in bioql PyPI...

CVE-2023-28688

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7...

CVE-2023-28688

CVE-2023-28688 affects the WordPress plugin TH Variation Swatches (ThemeHunk TH Variation Swatches). A Cross-Site Request Forgery (CSRF) vulnerability exists in versions up to and including 1.2.7 and is caused by insufficient CSRF protection in the plugin’s settings/actions flow. Impact is limite...

WordPress TH Variation Swatches Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software TH Variation Swatches Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28688 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c365052e6ec0 Credits István Márton...