CSRF - CVE CyberSecurity Database News (Page 14)

Feb 29, 2024 CSRF XSS WordPress Exploit Ernest Marcinko Ajax Search Lite

CVE-2024-21752 - CSRF to Reflected XSS in Ajax Search Lite (<=4.11.4) — What You Need to Know

In early 2024, security researchers uncovered a dangerous vulnerability (CVE-2024-21752) affecting Ajax Search Lite, a popular WordPress plugin by Ernest Marcinko. If you're

Feb 29, 2024 CSRF WordPress API PHP Thrive Themes Thrive Automator

CVE-2023-51531 - Cross-Site Request Forgery (CSRF) Vulnerability in Thrive Themes Thrive Automator (v1.17 and Below) – Exploit Details & Patch Guidance

--- CVE-2023-51531 is a security vulnerability involving Cross-Site Request Forgery (CSRF) in the popular Thrive Automator WordPress plugin, from its initial versions up to and

Feb 29, 2024 CSRF WordPress Exploit GS Plugins

CVE-2023-51530 - Exploiting CSRF in GS Plugins Logo Slider – Showcase Your Logos, Expose Your Site

Summary: *CVE-2023-51530* is a Cross-Site Request Forgery (CSRF) vulnerability found in the WordPress plugin Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo

Feb 29, 2024 CSRF PHP Heureka Group Heureka

CVE-2024-25931 - CSRF Vulnerability in Heureka Group’s Heureka (Up to 1..8) – Deep Dive & Exploit Explained

A new security flaw has been assigned as CVE-2024-25931 impacting the *Heureka* project by Heureka Group. This bug exposes installations up to version 1..8

Feb 29, 2024 CSRF WordPress Exploit Nuggethon Custom Order Statuses for WooCommerce

CVE-2024-25930 - Exploiting CSRF in Nuggethon Custom Order Statuses for WooCommerce (<= 1.5.2)

On February 21, 2024, a serious security vulnerability was disclosed in the Nuggethon Custom Order Statuses for WooCommerce plugin, affecting all versions up to 1.