Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
FrenifyCategorify

10 matches found

CVE
CVE•added 2024/02/27 11:15 a.m.•130 views

CVE-2024-1906

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxAddCategory function. This makes it possible for unauthenticated attackers to add categories via a...

4.3CVSS5.2AI score0.00097EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•130 views

CVE-2024-1912

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxUpdateFolderPosition function. This makes it possible for unauthenticated attackers to update the ...

4.3CVSS5.2AI score0.00097EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•127 views

CVE-2024-1907

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxDeleteCategory function. This makes it possible for unauthenticated attackers to delete categories...

4.3CVSS5.2AI score0.00097EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•124 views

CVE-2024-1653

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxUpdateFolderPosition in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abov...

4.3CVSS5.2AI score0.00102EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•115 views

CVE-2024-1650

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxRenameCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and a...

4.3CVSS4.6AI score0.00102EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•114 views

CVE-2024-1910

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxClearCategory function. This makes it possible for unauthenticated attackers to clear categories v...

4.3CVSS5.2AI score0.00097EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•113 views

CVE-2024-1909

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxRenameCategory function. This makes it possible for unauthenticated attackers to rename categories...

4.3CVSS4.5AI score0.00097EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•110 views

CVE-2024-1649

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxDeleteCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and a...

4.3CVSS5.2AI score0.00102EPSS
CVE
CVE•added 2024/02/27 11:15 a.m.•110 views

CVE-2024-1652

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxClearCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and ab...

4.3CVSS5.2AI score0.00102EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•63 views

CVE-2024-0385

The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxAddCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abov...

4.3CVSS5.2AI score0.01863EPSS