Lucene search
+L

5 matches found

cnvd
cnvd
added 2023/02/08 12:0 a.m.43 views

WordPress plugin 0mk Shortener Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.7AI score0.00512EPSS
Exploits1References1
attackerkb
attackerkb
added 2023/02/06 7:15 p.m.3 views

CVE-2022-2933

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromkoptionspage function. This makes it possible for unauthenticated attackers to inject malicious web scripts vi...

8.8CVSS5.8AI score0.00512EPSS
Exploits1References3
osv
osv
added 2023/02/06 7:15 p.m.6 views

CVE-2022-2933

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromkoptionspage function. This makes it possible for unauthenticated attackers to inject malicious web scripts vi...

8.8CVSS5.6AI score0.00512EPSS
Exploits1References2
prion
prion
added 2023/02/06 7:15 p.m.33 views

Cross site request forgery (csrf)

The 0mk Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the zeromkoptionspage function. This makes it possible for unauthenticated attackers to inject malicious web scripts vi...

6.8CVSS8.3AI score0.00512EPSS
Exploits1References2Affected Software1
cnnvd
cnnvd
added 2023/02/06 12:0 a.m.8 views

WordPress plugin 0mk Shortener 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.8AI score0.00512EPSS
Exploits1References3
Rows per page
Query Builder