Lucene search
+L

24 matches found

OSV
OSV
•added 2024/09/17 6:15 a.m.•21 views

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/17 6:15 a.m.•35 views

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00229EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/17 6:00 a.m.•18 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

5.5AI score0.00229EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/17 6:00 a.m.•79 views

CVE-2024-8047

The Visual Sound (old) WordPress plugin, v1.06 and earlier, is disclosed as lacking CSRF protection when updating settings. This enables CSRF-based changes by an attacker with a logged‑in admin account. The exact patch version is not provided in the supplied documents; remediation is to upgrade t...

6.5CVSS6.6AI score0.00229EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/09/17 6:00 a.m.•46 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00229EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•8 views

CVE-2024-8047: Cross-Site Request Forgery (CSRF)

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/17 12:00 a.m.•28 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.7AI score0.00229EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/09/16 12:00 a.m.•23 views

PT-2024-38773 · WordPress · Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound old WordPress plugin versions 1.06 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF...

6.5CVSS6.3AI score0.00229EPSS
SaveExploits1References8
Patchstack
Patchstack
•added 2024/09/12 10:40 a.m.•12 views

WordPress Visual Sound plugin <= 1.03 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound versions = 1.03...

6.5CVSS7AI score0.00253EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/09/12 6:15 a.m.•15 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/12 6:15 a.m.•27 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00253EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/12 6:00 a.m.•66 views

CVE-2024-7859

The CVE-2024-7859 entry affects the Visual Sound WordPress plugin (versions

6.5CVSS6.3AI score0.00253EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/09/12 6:00 a.m.•32 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00253EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/12 6:00 a.m.•13 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.8AI score0.00253EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/12 12:00 a.m.•8 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.5AI score0.00253EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/12 12:00 a.m.•5 views

CVE-2024-7859: Cross-Site Request Forgery (CSRF)

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2024/09/12 12:00 a.m.•20 views

WordPress Visual Sound Plugin <= 1.03 is vulnerable to Cross Site Request Forgery (CSRF)

Software Visual Sound Type Plugin Vulnerable versions = 1.03 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7859 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9af6354dfaf3 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00253EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/09/11 12:00 a.m.•20 views

PT-2024-38636 · WordPress · The Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound WordPress plugin versions 1.03 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attac...

6.5CVSS7AI score0.00253EPSS
SaveExploits1References6
Patchstack
Patchstack
•added 2024/08/29 1:09 a.m.•10 views

WordPress Visual Sound (old) plugin <= 1.06 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound old versions = 1.06...

6.5CVSS7AI score0.00229EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2024/08/29 12:00 a.m.•18 views

WordPress Visual Sound (old) Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)

Software Visual Sound old Type Plugin Vulnerable versions = 1.06 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8047 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d48c153c5f25 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00229EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder