Show filters
67 Total Results
Displaying 41-50 of 67
Sort by:
Attacker Value
Unknown

CVE-2023-23792

Disclosure Date: July 11, 2023 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <= 1.2.0 versions.
Attacker Value
Unknown

CVE-2023-23804

Disclosure Date: July 10, 2023 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Feed plugin <= 1.2.7 versions.
Attacker Value
Unknown

CVE-2023-23802

Disclosure Date: June 15, 2023 (last updated October 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions.
Attacker Value
Unknown

CVE-2023-23801

Disclosure Date: April 06, 2023 (last updated November 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions.
Attacker Value
Unknown

CVE-2023-1089

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Attacker Value
Unknown

CVE-2023-1088

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Attacker Value
Unknown

CVE-2023-1087

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The WC Sales Notification WordPress plugin before 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Attacker Value
Unknown

CVE-2023-1086

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Attacker Value
Unknown

CVE-2023-0505

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The Ever Compare WordPress plugin through 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack
Attacker Value
Unknown

CVE-2023-0504

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
The HT Politic WordPress plugin before 2.3.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack