Lucene search
+L

6 matches found

CNVD
CNVD
•added 2021/12/18 12:00 a.m.•36 views

WordPress WP Limits plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WP Limits plugin is a WordPress open source application plugin. WordPress WP Limits plugin in version 1.0 and...

4.3CVSS2.3AI score0.0045EPSS
SaveExploits2References1
Prion
Prion
•added 2021/12/13 11:15 a.m.•20 views

Cross site request forgery (csrf)

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...

4.3CVSS4.5AI score0.0045EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2021/12/13 10:41 a.m.•80 views

CVE-2021-24818

The CVE-2021-24818 entry maps to the WP Limits WordPress plugin (version

4.3CVSS4.4AI score0.0045EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•2 views

CVE-2021-24818: Cross-Site Request Forgery (CSRF)

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...

4.3CVSS5.8AI score0.0045EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/12/13 12:00 a.m.•3 views

PT-2021-16310

Name of the Vulnerable Software and Affected Versions: WP Limits WordPress plugin versions 1.0 and earlier Description: The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them. This could potentially make the blog unstable by settin...

4.3CVSS0.0045EPSS
SaveExploits2References4
Patchstack
Patchstack
•added 2021/11/15 12:00 a.m.•29 views

WordPress Wp Limits plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Cross-Site Request Forgery CSRF vulnerability leading to Plugin Settings Update discovered by Francesco Carlucci in WordPress Wp Limits plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of October 4, 2021 and is not available for download. This closure is...

4.3CVSS1.9AI score0.0045EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder