CVE-2023-34378

CVE-2023-34378 (WP Hide Post) is a CSRF vulnerability in the WordPress plugin WP Hide Post (affected:

WordPress Plugin wp-hide-post Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-24850 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: WP Hide Post plugin versions = 2.0.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...

CVE-2023-44232

Cross-Site Request Forgery CSRF vulnerability in Huseyin Berberoglu WP Hide Pages plugin = 1.0 versions...

CVE-2023-44232

Cross-Site Request Forgery CSRF vulnerability in Huseyin Berberoglu WP Hide Pages plugin = 1.0 versions...

CVE-2023-44232

CVE-2023-44232 is a CSRF vulnerability in the WordPress WP Hide Pages plugin (versions up to 1.0). The PatchStack entry notes unauthenticated exploit capability and that no patch is available to fix this vulnerability; the WP Hide Pages pages remain unpatched. No concrete remediation is provided ...

PT-2023-29157 · Huseyin Berberoglu · Wp Hide Pages

Name of the Vulnerable Software and Affected Versions: Huseyin Berberoglu WP Hide Pages plugin version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

CVE-2022-3489

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...

Cross site request forgery (csrf)

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...

PT-2022-22419 · WordPress · Wp Hide

Name of the Vulnerable Software and Affected Versions: WP Hide WordPress plugin versions 0.0.0 through 0.0.2 Description: The issue concerns a lack of authorization and CSRF checks when updating the custom wpadmin slug settings. This allows unauthenticated attackers to update the settings with a...

CVE-2022-3489 WP Hide <= 0.0.2 - Unauthenticated Settings Update

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...

CVE-2022-3489

WP Hide WordPress plugin (versions 0.0.0–0.0.2) is affected by an unauthenticated settings update vulnerability in the custom_wpadmin_slug feature. The root cause is missing authorization and CSRF checks on the update endpoint (Settings update for the slug), enabling unauthenticated attackers to ...

CVE-2022-3489 WP Hide <= 0.0.2 - Unauthenticated Settings Update

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...

WP Hide <= 0.0.2 - Unauthenticated Settings Update

The plugin does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request curl -X POST --data "customwpadminslug=attacker-value" https://example.com/wp-admin/admin-post.php Settings is...

CVE-2022-2538

The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting...

CVE-2022-2538

The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting...

CVE-2022-2538

The CVE-2022-2538 entry corresponds to the WP Hide & Security Enhancer WordPress plugin. Affected: versions prior to 1.8. Root cause: the plugin does not escape a parameter before outputting it back in an attribute of a backend page, producing a Reflected Cross‑Site Scripting (XSS) vulnerability....