Security
Headlines
HeadlinesLatestCVEs

Tag

#wordpress

CVE-2023-37973: WordPress Replace Word plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in David Pokorny Replace Word plugin <= 2.1 versions.

CVE
#csrf#vulnerability#wordpress#auth
CVE-2023-37889: WordPress WPAdmin AWS CDN plugin <= 2.0.13 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in WPAdmin WPAdmin AWS CDN plugin <= 2.0.13 versions.

CVE-2023-25036: WordPress Social Media Icons Widget plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in akhlesh-nagar, a.Ankit Social Media Icons Widget plugin <= 1.6 versions.

CVE-2022-47169: WordPress Visibility Logic for Elementor plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in StaxWP Visibility Logic for Elementor plugin <= 2.3.4 versions.

CVE-2023-23660: WordPress MainWP Maintenance Extension Plugin <= 4.1.1 - Subscriber+ SQL Injection Vulnerability - Patchstack

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP MainWP Maintenance Extension plugin <= 4.1.1 versions.

CVE-2023-25473: WordPress Flickr Justified Gallery plugin <= 3.5 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Miro Mannino Flickr Justified Gallery plugin <= 3.5 versions.

CVE-2023-25475: WordPress Smart YouTube PRO plugin <= 4.3 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Vladimir Prelovac Smart YouTube PRO plugin <= 4.3 versions.