Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-50873

Disclosure Date: December 28, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4.
Attacker Value
Unknown

CVE-2023-28618

Disclosure Date: November 12, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin <= 1.16 versions.
Attacker Value
Unknown

CVE-2020-35135

Disclosure Date: December 11, 2020 (last updated February 22, 2025)
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.
Attacker Value
Unknown

CVE-2020-13641

Disclosure Date: May 28, 2020 (last updated February 21, 2025)
An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The find and replace rules could be updated with malicious JavaScript, allowing for that be executed later in the victims browser.