CVE-2023-0504

CVE-2023-0504 – HT Politic WordPress plugin prior to 2.3.8 suffers a CSRF flaw during plugin activation, allowing a CSRF attacker to cause logged-in admins to activate arbitrary plugins. This requires an authenticated admin user and CSRF interaction. Impact : arbitrary plugin activation within th...

CVE-2024-51673

CVE-2024-51673: WordPress HT Politic plugin suffers DOM-based XSS due to improper input neutralization during page generation in versions up to 2.4.4 (affects HT Politic: from n/a through 2.4.4). The vulnerability can enable script injection by manipulating input processed during page rendering. ...