CVE-2024-30543 WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

Cross site request forgery (csrf)

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

CVE-2017-8099

CVE-2017-8099 affects the WHIZZ WordPress plugin prior to version 1.1.1. The connected documents describe a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker delete WordPress users and change the plugin’s status via a GET request. Exploitation details beyond this behavior are ...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

WordPress WHIZZ Cross Site Request Forgery

Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1 changelog-Specifically Best regards, Zhiyang Zeng of Tencent security...

WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery

WordPress Plugin WHIZZ 1.1.1 - Cross-Site Request Forgery ====== Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1...

WordPress WHIZZ plugin <=1.1 - Cross-Site Request Forgery vulnerability

WordPress WHIZZ plugin version 1.1 and earlier versions vulnerable to Cross-Site Request Forgery type attacks. An attacker could exploit this vulnerability to delete any WordPress user and change any plugin status. Solution Update WordPress WHIZZ plugin to the latest available version at least...

WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery

====== Software: WordPress WHIZZ Version: active or disactive plugins: Mitigations ================ Disable the plugin until a new version is released that fixes this bug. FIX: ========== https://wordpress.org/plugins/whizz/ 1.1.1 changelog-Specifically...

WHIZZ <= 1.1 - Cross-Site Request Forgery (CSRF)

The WHIZZ WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Wordpress whizz plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. whizz is one of the plug-ins used in the back-end management of WordPress and add a color-coded interface . A...

CVE-2016-1000154

Reflected XSS in wordpress plugin whizz v1.0.7...

Cross site scripting

Reflected XSS in wordpress plugin whizz v1.0.7...

CVE-2016-1000154

Reflected XSS in wordpress plugin whizz v1.0.7...

CVE-2016-1000154

CVE-2016-1000154 affects the WordPress WHIZZ plugin (versions

WHIZZ <= 1.0.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The WHIZZ WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/whizz/plugins/delete-plugin.php?plugin=""...

WordPress WHIZZ Plugin <= 1.0.7 - Cross Site Scripting

An unauthenticated reflected cross site scripting vulnerability is in the php code ./whizz/plugins/delete-plugin.php: 7: Solution Update the plugin...