Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-47162: WordPress DH – Anti AdBlocker plugin <= 36 - Cross Site Request Forgery (CSRF) - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Dannie Herdyawan DH – Anti AdBlocker plugin <= 36 versions.

CVE
#csrf#vulnerability#wordpress#auth

Solution

Update the WordPress DH – Anti AdBlocker plugin to the latest available version (at least 37).

rezaduty discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress DH – Anti AdBlocker Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has been fixed in version 37.

No other known vulnerabilities for this pluginReport

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda