Lucene search
+L

2 matches found

CNVD
CNVD
•added 2014/12/26 12:00 a.m.•14 views

WordPress Plugin Mikiurl Wordpress Eklentisi Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. WordPress Plugin Mikiurl Wordpress Eklentisi 2.0 and prior versions suffer from multiple cross-site request forgery vulnerabilities that all...

6.8CVSS7.1AI score0.01001EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/19 12:00 a.m.•9 views

CVE-2014-9337: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Mikiurl Wordpress Eklentisi plugin 2.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 twitterkullanici or 2...

6.8CVSS5.8AI score0.01001EPSS
SaveExploits2References2
Rows per page
Query Builder