Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•20 views

WordPress Plugin BEAR Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.7AI score0.00364EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•5 views

PT-2023-31112

Name of the Vulnerable Software and Affected Versions The BEAR for WordPress versions up to, and including, 1.1.3.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe save options function. This allows unauthenticated attackers...

8.8CVSS5.7AI score0.00364EPSS
SaveExploits0References7
Rows per page
Query Builder