Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.5 views

CVE-2020-36761

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

4.3CVSS6.4AI score0.0018EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.2 views

WordPress plugin Top 10 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.6AI score0.00143EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/09 6:21 p.m.7 views

CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin = 3.3.2 versions...

4.3CVSS8.9AI score0.00077EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.6 views

WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Top 10 Type Plugin Vulnerable versions = 3.3.2 Fixed in 3.3.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47238 Patch priority Low CVSS severity Low 4.3 Developer WebberZone PSID 8f757ce5ee2d Credits Brandon Roldan Required privilege...

8.8CVSS6.7AI score0.00077EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/07/12 8:15 a.m.10 views

CVE-2020-36761

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

4.3CVSS4.2AI score0.0018EPSS
Exploits1References9
Prion
Prion
added 2023/07/12 8:15 a.m.11 views

Cross site request forgery (csrf)

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

4.3CVSS4.3AI score0.0018EPSS
Exploits1References9Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/12 7:21 a.m.9 views

CVE-2020-36761 Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

4.3CVSS5.8AI score0.0018EPSS
Exploits1References9
Cvelist
Cvelist
added 2023/07/12 7:21 a.m.16 views

CVE-2020-36761 Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptnexporttables function. This makes it possible for unauthenticated attackers to generate an export of the top 10 tab...

4.3CVSS4.2AI score0.0018EPSS
Exploits1References9
CVE
CVE
added 2023/07/12 7:21 a.m.70 views

CVE-2020-36761

The CVE-2020-36761 entry concerns the WordPress Top 10 plugin. A Cross-Site Request Forgery vulnerability in versions up to 2.10.4 arises from missing or incorrect nonce validation in tptn_export_tables(), allowing unauthenticated attackers to trigger an export of the Top 10 table via a forged re...

4.3CVSS4.2AI score0.0018EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2023/03/23 4:48 p.m.15 views

CVE-2023-26008 WordPress Top 10 Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin = 3.2.4 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References1
Patchstack
Patchstack
added 2022/12/29 12:0 a.m.6 views

WordPress Top 10 Plugin < 3.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Top 10 Type Plugin Vulnerable versions 3.2.3 Fixed in 3.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4570 Patch priority Medium CVSS severity Medium 6.3 Developer WebberZone PSID f49ce51b95e1 Credits István Márton Required privilege...

5.4CVSS5.6AI score0.00181EPSS
Exploits2References3Affected Software1
Patchstack
Patchstack
added 2020/09/16 12:0 a.m.4 views

WordPress Top 10 plugin <= 2.9.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Top 10 plugin versions = 2.9.4. Solution Update the WordPress Top 10 plugin to the latest available version at least 2.9.5...

3AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2017/12/20 12:0 a.m.13 views

WordPress Top 10 plugin <=2.4.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Defense Code in WordPress Top 10 plugin versions =2.4.3 Solution Update the WordPress Top 10 plugin to the latest available version at least 2.4.4...

2.9AI score
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2016/07/13 12:0 a.m.27 views

WordPress Top 10 Popular Posts 2.3.0 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Top 10 - Popular posts plugin for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...

7.4AI score
Exploits0
Rows per page
Query Builder