Lucene search

K

6 matches found

CVE
CVE
added 2023/06/09 7:15 a.m.42 views

CVE-2023-2896

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_duplicate_product function. This makes it possible for unauthenticated attackers to duplicate products via a ...

4.3CVSS4.4AI score0.00094EPSS
CVE
CVE
added 2023/06/09 7:15 a.m.40 views

CVE-2023-2894

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_bulk_deactivate_product function. This makes it possible for unauthenticated attackers to bulk deactivate pro...

4.3CVSS4.4AI score0.00094EPSS
CVE
CVE
added 2023/06/09 7:15 a.m.36 views

CVE-2023-2893

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_deactivate_product function. This makes it possible for unauthenticated attackers to deactivate products via ...

4.3CVSS4.4AI score0.00085EPSS
CVE
CVE
added 2023/06/09 6:16 a.m.30 views

CVE-2023-2891

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_delete_product function. This makes it possible for unauthenticated attackers to delete products via a forged...

6.5CVSS4.4AI score0.00094EPSS
CVE
CVE
added 2023/06/09 7:15 a.m.30 views

CVE-2023-2892

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_bulk_delete_product function. This makes it possible for unauthenticated attackers to bulk delete products vi...

6.5CVSS4.4AI score0.00088EPSS
CVE
CVE
added 2023/06/09 7:15 a.m.30 views

CVE-2023-2895

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_bulk_activate_product function. This makes it possible for unauthenticated attackers to bulk activate product...

4.3CVSS4.4AI score0.00094EPSS