CSRF - CVE CyberSecurity Database News (Page 31)

Oct 17, 2023 CSRF PHP

CVE-2023-45906 - CSRF Attack in Dreamer CMS v4.1.3 — How the /admin/user/add Route Opens the Door

Dreamer CMS is an open-source content management system used by small businesses and developers for fast website deployment. In November 2023, a significant security flaw—

Oct 17, 2023 CSRF Exploit PHP

CVE-2023-45907 - How a CSRF Vulnerability in Dreamer CMS v4.1.3 Puts Your Site Variables at Risk

In late 2023, security researchers uncovered a Cross-Site Request Forgery (CSRF) vulnerability in Dreamer CMS v4.1.3. This flaw, registered as CVE-2023-45907, lets attackers

Oct 16, 2023 CSRF WordPress API Exploit PHP Taggbox

CVE-2023-45763 - Exploiting CSRF in Taggbox Plugin ≤ 2.9—Explained Simply

Taggbox is a popular WordPress plugin for embedding social media feeds on websites. It helps marketers and site owners share social proof by showcasing real-time

Oct 12, 2023 CSRF WordPress PHP Jonk @ Follow me Darling Sp*tify Play Button for WordPress

CVE-2023-41131 - CSRF Vulnerability in "Follow me Darling Sp*tify Play Button" WordPress Plugin <= 2.10 — Explained with Code and Exploit Details

On August 22, 2023, a new Cross-Site Request Forgery (CSRF) vulnerability was reported in the "Follow me Darling Sp*tify Play Button" WordPress

Oct 11, 2023 CSRF PHP snipe

CVE-2023-5511 - Understanding the CSRF Vulnerability in Snipe-IT < v6.2.3

In October 2023, a Cross-Site Request Forgery (CSRF) vulnerability was disclosed in the popular asset management system, Snipe-IT. Identified as CVE-2023-5511, this vulnerability affected versions