Lucene search

K

Nikeo Security Vulnerabilities

cve
cve

CVE-2020-36753

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3. This is due to missing or incorrect nonce validation on the save_meta_box() function. This makes it possible for unauthenticated attackers to save metabox data via a forged request...

4.3CVSS

4.2AI Score

0.001EPSS

2023-10-20 08:15 AM
8
cve
cve

CVE-2020-36755

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0. This is due to missing or incorrect nonce validation on the czr_fn_post_fields_save() function. This makes it possible for unauthenticated attackers to post fields via a forged...

4.3CVSS

4.2AI Score

0.001EPSS

2023-10-20 08:15 AM
13