#wordpress

CVE-2020-36750: Changeset 2417429 for ewww-image-optimizer/trunk/classes/class-ewww-nextgen.php – WordPress Plugin Repository

The EWWW Image Optimizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on the ewww_ngg_bulk_init() function. This makes it possible for unauthenticated attackers to perform bulk image optimization via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

1 year ago

CVE

Open in Source

#wordpress #php #auth

CVE-2023-25706: WordPress WordPress Robots.txt optimization (+ XML Sitemap) – Website traffic, SEO & ranking Booster plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Pagup WordPress Robots.Txt optimization plugin <= 1.4.5 versions.

1 year ago

CVE

Open in Source

#csrf #vulnerability #web #wordpress #auth

CVE-2023-34029: WordPress Disable WordPress Update Notifications plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin <= 2.3.3 versions.

1 year ago

CVE

Open in Source

#csrf #vulnerability #wordpress #auth

CVE-2023-25443: WordPress Button Generator plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.5 versions.

1 year ago

CVE

Open in Source

#csrf #vulnerability #wordpress #auth

CVE-2023-35773: WordPress Template Debugger plugin <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability - Patchstack

Cross-Site Request Forgery (CSRF) vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin <= 3.1.2 versions.