CVE-2024-13580

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2024-13580

The XV Random Quotes WordPress plugin, affecting versions 1.40 and earlier (and specifically noted as

CVE-2024-13574

The XV Random Quotes WordPress plugin versions 1.40 and earlier is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape a parameter before it is output back onto the page. This flaw could be exploited to target high-priv...