CSRF - CVE CyberSecurity Database News (Page 58)

Nov 8, 2022 CSRF WordPress API

CVE-2022-43491 - How Attackers Exploit CSRF in Advanced Dynamic Pricing for WooCommerce to Import Settings

--- The digital landscape is filled with vulnerabilities, but some, like Cross-Site Request Forgery (CSRF), remain sneaky and dangerous. One such flaw emerged in the

Nov 8, 2022 CSRF XSS WordPress Exploit Google Fatcat Apps Analytics Cat (WordPress plugin)

CVE-2022-27855 - Exploiting CSRF in Fatcat Apps Analytics Cat Plugin for WordPress (<= 1..9)

A serious Cross-Site Request Forgery (CSRF) vulnerability, tracked as CVE-2022-27855, was discovered in the Fatcat Apps *Analytics Cat* plugin (version 1..9 and below) for

Nov 8, 2022 CSRF XSS WordPress Vladimir Anokhin Shortcodes Ultimate (WordPress plugin)

CVE-2022-41136 - How a CSRF Flaw Opened Doors to Stored XSS in the Shortcodes Ultimate WordPress Plugin (v5.12. and Below)

If you’re running a WordPress site and use the popular “Shortcodes Ultimate” plugin by Vladimir Anokhin, you might have heard about a dangerous security

Nov 8, 2022 CSRF WordPress AlgolPlus Advanced Order Export For WooCommerce (WordPress plugin)

CVE-2022-40128 - How CSRF in "Advanced Order Export For WooCommerce" Lets Attackers Steal Your Exported Data

If you're running a WordPress store powered by WooCommerce, chances are you rely on plugins for every special feature. One popular tool, Advanced

Nov 8, 2022 CSRF XSS WordPress Advanced Ads GmbH

CVE-2022-32776 - Admin+ Stored XSS Vulnerability in Advanced Ads – Ad Manager & AdSense WordPress Plugin (<= 1.31.1)

WordPress powers millions of websites, making plugin security a top concern for website owners, admins, and developers. In June 2022, a serious vulnerability was found