WordPress Dynamic Widgets Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Dynamic Widgets Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-51669 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 96b0608ca8f4 Credits Ananda Dhakal Patchstack...

WordPress Dynamic Widgets plugin <= 1.5.16 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by JrXnm in WordPress Dynamic Widgets plugin versions = 1.5.16. Solution Deactivate and delete. This plugin has been closed as of December 28, 2021 and is not available for download. This closure is temporary, pending a full review...