7 matches found
EUVD-2025-15368
Malicious code in bioql PyPI...
CVE-2023-7297
The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-7297
The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-7297
The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-7297 TwitterPosts <= 1.0.2 - Settings Update via CSRF
The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-7297 TwitterPosts <= 1.0.2 - Settings Update via CSRF
The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2023-7297
The TwitterPosts WordPress plugin (versions 1.0.0 through 1.0.2 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of proper CSRF checks when updating settings. This flaw could allow an attacker to force a logged-in administrator to modify plugin settings unexpectedly. To...