11783 matches found
CVE-2022-46812
Cross-Site Request Forgery CSRF vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin = 1.0.13 versions...
CVE-2022-47159
Cross-Site Request Forgery CSRF vulnerability in Logaster Logaster Logo Generator plugin = 1.3 versions...
PT-2023-22722 · WordPress · Upress Enable Accessibility
Name of the Vulnerable Software and Affected Versions: uPress Enable Accessibility plugin versions = 1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2023-14004 · Woocommerce · Zorem Advanced Shipment Tracking
Name of the Vulnerable Software and Affected Versions: Zorem Advanced Shipment Tracking for WooCommerce plugin versions = 3.5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a we...
CVE-2022-47448
Cross-Site Request Forgery CSRF vulnerability in dev.Xiligroup.Com - MS plugin = 1.12.03 versions...
CVE-2022-47152
Cross-Site Request Forgery CSRF vulnerability in Etison, LLC ClickFunnels plugin = 3.1.1 versions...
CVE-2022-46816
Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin = 1.1.4 versions...
PT-2023-13719 · Synapse +2 · Synapse +2
Name of the Vulnerable Software and Affected Versions: Synapse versions up to and including 1.68.0 Description: The Matrix Federation API in Synapse allows remote homeservers to request authorization events in a room, which is necessary for validating the legitimacy and permission of events...
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection
Software WooCommerce Follow-Up Emails Type Plugin Vulnerable versions = 4.9.50 Fixed in 4.9.51 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33330 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 7a94f72827ab Credits Rafie Muhammad Patchstack Required...
Veeam Explorer for Microsoft Teams Error: "Tab type is not supported"
Challenge The Tenants of a Service Provider, who has recently upgraded to Veeam Backup for Microsoft 365 version 7.0.0.3604 P20230512, may receive the following error when attempting to restore using Veeam Explorer for Microsoft Teams: Tab type is not supported. Cause This error occurs because th...
CVE-2022-46851
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force Starter Templates plugin = 3.1.20 versions...
CVE-2022-47611
Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...
CVE-2022-44739
Cross-Site Request Forgery CSRF vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin = 1.5.4 versions...
CVE-2023-22688
Cross-Site Request Forgery CSRF vulnerability in Abdul Ibad WP Tabs Slides plugin = 2.0.3 versions...
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)
Software WooCommerce Follow-Up Emails Type Plugin Vulnerable versions = 4.9.40 Fixed in 4.9.50 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33316 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 0e0bdd6cea04 Credits Rafi...
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Follow-Up Emails Type Plugin Vulnerable versions = 4.9.40 Fixed in 4.9.50 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33319 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID da1adfccae00 Credits...
WooCommerce Follow-Up Emails < 4.9.50 - Cross-Site Request Forgery (CSRF)
The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request...
WooCommerce Follow-Up Emails < 4.9.50 - Unauthenticated Reflected XSS
The plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin...
WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload
Software WooCommerce Follow-Up Emails Type Plugin Vulnerable versions = 4.9.40 Fixed in 4.9.50 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-33318 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID c6e0ffcab096 Credits Rafie Muhammad...