Lucene search
K

4 matches found

CNVD
CNVD
added 2021/12/18 12:0 a.m.9 views

WordPress WP Limits plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WP Limits plugin is a WordPress open source application plugin. WordPress WP Limits plugin in version 1.0 and...

4.3CVSS2.3AI score0.00103EPSS
Exploits2References1
Prion
Prion
added 2021/12/13 11:15 a.m.10 views

Cross site request forgery (csrf)

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...

4.3CVSS4.5AI score0.00103EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2021/12/13 10:41 a.m.45 views

CVE-2021-24818

The CVE-2021-24818 entry maps to the WP Limits WordPress plugin (version

4.3CVSS4.4AI score0.00103EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2021/11/15 12:0 a.m.16 views

WordPress Wp Limits plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Cross-Site Request Forgery CSRF vulnerability leading to Plugin Settings Update discovered by Francesco Carlucci in WordPress Wp Limits plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of October 4, 2021 and is not available for download. This closure is...

4.3CVSS1.9AI score0.00103EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder