228 matches found
CVE-2025-47523
CVE-2025-47523 relates to a CSRF vulnerability in the WordPress Seznam Webmaster plugin (affected: Seznam Webmaster
CVE-2025-47523 WordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Lukáš Hartmann Seznam Webmaster seznam-webmaster allows Cross Site Request Forgery.This issue affects Seznam Webmaster: from n/a through = 1.4.7...
CVE-2025-47523 WordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Lukáš Hartmann Seznam Webmaster seznam-webmaster allows Cross Site Request Forgery.This issue affects Seznam Webmaster: from n/a through = 1.4.7...
WordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Seznam Webmaster versions = 1.4.7...
WordPress plugin Seznam Webmaster 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Seznam Webmaster plugin, which stems from the WEB application not adequately verifying that a request is comin...
PT-2025-20145 · Seznam · Seznam Webmaster
Name of the Vulnerable Software and Affected Versions: Seznam Webmaster versions 1.4.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.4.7 and earlier, update to a versio...
CVE-2024-51640
Cross-Site Request Forgery CSRF vulnerability in Matt Rude MDR Webmaster Tools mdr-webmaster-tools allows Stored XSS.This issue affects MDR Webmaster Tools: from n/a through = 1.1...
CVE-2024-51640
Cross-Site Request Forgery CSRF vulnerability in Matt Rude MDR Webmaster Tools mdr-webmaster-tools allows Stored XSS.This issue affects MDR Webmaster Tools: from n/a through = 1.1...
CVE-2024-51640 WordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Matt Rude MDR Webmaster Tools mdr-webmaster-tools allows Stored XSS.This issue affects MDR Webmaster Tools: from n/a through = 1.1...
CVE-2024-51640 WordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Matt Rude MDR Webmaster Tools mdr-webmaster-tools allows Stored XSS.This issue affects MDR Webmaster Tools: from n/a through = 1.1...
CVE-2024-51640
CVE-2024-51640 is a CSRF-to-Stored-XSS vulnerability in the WordPress plugin MDR Webmaster Tools (WordPress MDR Webmaster Tools) affecting versions n/a through 1.1. The vulnerability is triggered by Cross-Site Request Forgery which can lead to Stored XSS when an attacker causes a victim to perfor...
PT-2024-34784 · Unknown · Mdr Webmaster Tools
Name of the Vulnerable Software and Affected Versions: MDR Webmaster Tools versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, an...
WordPress plugin MDR Webmaster Tools 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site request...
WordPress MDR Webmaster Tools plugin <= 1.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin MDR Webmaster Tools versions = 1.1...
WordPress MDR Webmaster Tools Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software MDR Webmaster Tools Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51640 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 09b0197e2521 Credits SOPROBRO Required...
BIT-SEOPANEL-2021-29008
A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "totime" parameter...
Original texts Yandex WebMaster <= 1.18 - Cross-Site Request Forgery
Description The Original texts Yandex WebMaster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.18. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an...
Webmaster Tools <= 2.0 - Settings Update to Stored XSS via CSRF
Description The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...