EUVD-2020-22827

Malware in sbrugna...

WordPress ultimate-category-excluder plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...

CVE-2020-35135

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

Cross site request forgery (csrf)

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

CVE-2020-35135

The CVE-2020-35135 issue affects the WordPress plugin “ultimate-category-excluder” (versions prior to 1.2). The root cause is a CSRF vulnerability in the ultimate-category-excluder.php file stemming from insufficient CSRF protections on the plugin’s options page. Affected component: plugin PHP co...

CVE-2020-35135

The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...

Ultimate Category Excluder < 1.2 - Cross-Site Request Forgery

The plugin did not check for CSRF nonce in its options page, allowing attacker to perform CSRF attacks against logged in users...

WordPress Ultimate Category Excluder plugin <= 1.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by SCA AppSec Checkmarx in WordPress Ultimate Category Excluder plugin versions = 1.1. Solution Update the WordPress Ultimate Category Excluder plugin to the latest available version at least 1.2...

WordPress ultimate-category-excluder plugin 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...

PT-2020-17265 · WordPress · Ultimate-Category-Excluder

Name of the Vulnerable Software and Affected Versions: ultimate-category-excluder plugin versions prior to 1.2 Description: The issue allows for CSRF in the ultimate-category-excluder.php file. Recommendations: For versions prior to 1.2, update to version 1.2 or later to resolve the issue...