Security
Headlines
HeadlinesLatestCVEs

Tag

#csrf

CVE-2023-31708: Three csrf vulnerabilities, you can modify Settings, you can delete articles, you can delete users · Issue #41 · weng-xianhu/eyoucms

A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function.

CVE
Open in Source
#csrf#vulnerability#js#auth
CVE-2023-2505

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files.

CVE-2023-25448: WordPress Archivist – Custom Archive Templates plugin <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.

CVE-2023-25447: WordPress ColorWay theme <= 4.2.3 - CSRF Leading to Arbitrary Plugin Activation - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.

CVE-2023-23797: WordPress Auto YouTube Importer plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions.

CVE-2022-47167: WordPress Crayon Syntax Highlighter plugin <= 2.8.4 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin <= 2.8.4 versions.

CVE-2022-47183: WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions.

CVE-2022-47611: WordPress Hover Image plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m Hover Image plugin <= 1.4.1 versions.

CVE-2022-44739: WordPress Quick Restaurant Reservations plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.5.4 versions.