PT-2023-1369 · Cisco · Cisco Broadworks Xtended Services Platform +2

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Application Server affected versions not specified Cisco BroadWorks Xtended Services Platform affected versions not specified Cisco BroadWorks Application Delivery Platform affected versions not specified Description: The iss...

PT-2022-6769 · Cisco · Cisco Broadworks Xtended Services Platform +3

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Cisco BroadWorks Application Server AS affected versions not specified Cisco BroadWorks Xtended Services Platform XSP affected versions not specified BroadWorks...

WordPress Admin Management Xtended plugin跨站请求伪造漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. Xtend and others are products of the Eclipse Foundation. Xtend is a general-purpose high-level programming language for the Java Virtual Machine. WordPress...

CVE-2022-1599

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status draft, published, slug, post date, comment status enabled,...

CVE-2022-1599

The CVE-2022-1599 entry concerns the WordPress plugin Admin Management Xtended (before 2.4.5). The vulnerability arises from missing CSRF checks in several AJAX actions, allowing an attacker with a logged-in user with sufficient capabilities to trigger actions such as changing post status (draft/...

CVE-2022-1599 Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status draft, published, slug, post date, comment status enabled,...

CVE-2022-1599: Cross-Site Request Forgery (CSRF)

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status draft, published, slug, post date, comment status enabled,...

PT-2022-13996

Name of the Vulnerable Software and Affected Versions Admin Management Xtended WordPress plugin versions prior to 2.4.5 Description The issue allows attackers to make logged-in users with the right capabilities call certain AJAX actions without proper CSRF checks. This can lead to unauthorized...

WordPress plugin Admin Management Xtended 跨站请求伪造漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. Xtend and others are products of the Eclipse Foundation. Xtend is a general-purpose high-level programming language for the Java Virtual Machine. WordPress...

WordPress Admin Management Xtended plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WorWordPress Admin Management Xtended plugin 2.4.4 and earlier versions are vulnerable to cross-site request...

CVE-2022-29450

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

CVE-2022-29450 WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

CVE-2022-29450

CVE-2022-29450 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the WordPress Admin Management Xtended plugin,

CVE-2022-29450 WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

CVE-2022-29450: Cross-Site Request Forgery (CSRF)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

WordPress plugin Admin Management Xtended 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WorWordPress Admin Management Xtended plugin 2.4.4 and earlier versions are vulnerable to cross-site request...

PT-2022-19625 · Unknown · Admin Management Xtended

Name of the Vulnerable Software and Affected Versions: Admin Management Xtended plugin versions = 2.4.4 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...

CVE-2022-29450

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress Admin Management Xtended plugin versions = 2.4.4. Solution Update the WordPress Admin Management Xtended plugin to the latest available version at least 2.4.5...