CSRF - CVE CyberSecurity Database News (Page 16)

Feb 28, 2024 CSRF XSS PHP

CVE-2024-26450 - How Attackers Can Take Over Piwigo via CSRF + Stored XSS (Full Breakdown & Exploit)

A dangerous vulnerability has been discovered in Piwigo photo gallery software before version 14.2.. Identified as CVE-2024-26450, this security hole can let a remote

Feb 28, 2024 CSRF WordPress Exploit Google bytesforall Atahualpa

CVE-2024-27948 - How a CSRF Vulnerability in Atahualpa WordPress Theme Puts Your Site at Risk

If you’re running a WordPress site and use the Atahualpa theme, then this post could save you from serious trouble. In March 2024, a

Feb 28, 2024 CSRF WordPress Exploit Ecwid Ecommerce Ecwid Ecommerce Shopping Cart

CVE-2023-51533 - Exploiting CSRF in Ecwid Ecommerce Shopping Cart (up to 6.12.4)

Ecwid Ecommerce Shopping Cart is a popular e-commerce plugin for many website platforms, letting users add online store functionality. CVE-2023-51533 is a Cross-Site Request Forgery

Feb 28, 2024 CSRF WordPress API PHP MailerLite MailerLite – WooCommerce integration

CVE-2023-52223 - Understanding and Exploiting the CSRF Vulnerability in MailerLite – WooCommerce Integration (<= 2..8)

In early 2024, a significant Cross-Site Request Forgery (CSRF) vulnerability was disclosed in the MailerLite – WooCommerce integration WordPress plugin, tracked as CVE-2023-52223. This flaw affects

Feb 28, 2024 CSRF WordPress Exploit Scott Paterson Easy PayPal & Stripe Buy Now Button

CVE-2023-51683 - Cross-Site Request Forgery (CSRF) in Easy PayPal & Stripe Buy Now Button (WordPress Plugin) – Full Details and Exploit

In December 2023, a Cross-Site Request Forgery (CSRF) vulnerability was revealed in the popular WordPress plugin Easy PayPal & Stripe Buy Now Button, maintained by