CSRF - CVE CyberSecurity Database News (Page 62)

Oct 31, 2022 CSRF WordPress Exploit Automatic User Roles Switcher

CVE-2022-3419 - How Subscribers Can Become Admins in WordPress with the Automatic User Roles Switcher Plugin Vulnerability

WordPress plugins make running a site easier, but when security is poor, even the simplest plugin can cause a big problem. This is exactly what

Oct 31, 2022 CSRF Exploit PHP Processwire

CVE-2022-40488 - How ProcessWire v3..200’s CSRF Flaw Can Expose Your Site (With an Example Exploit)

ProcessWire, a popular open source CMS (Content Management System) written in PHP, aims to make website development easy, secure, and robust. However, security vulnerabilities sometimes

Oct 28, 2022 CSRF WordPress Exploit demonisblack demon image annotation

CVE-2022-2864 - How a Missing Nonce in Demon Image Annotation Plugin Opened Thousands of WordPress Sites to CSRF

If you use WordPress to host your website, plugins are a double-edged sword: they can boost your site's functionality, but with the wrong

Oct 28, 2022 CSRF XSS Exploit PHP Rukovoditel

CVE-2022-43169 - Exploiting Rukovoditel v3.2.1 Users Groups Stored XSS—Step-by-Step Guide

Stored Cross-Site Scripting (XSS) vulnerabilities are among the scariest security bugs for collaborative web platforms. CVE-2022-43169 is a powerful example, discovered in Rukovoditel v3.2.

Oct 28, 2022 CSRF SQL

CVE-2022-3731 A vulnerability has been found in seccome Ehoney and classified as critical. The manipulation of the argument Payload leads to sql injection.

The vulnerability can be exploited via web requests and is detected by the rule SEH_SQL_INJECTION. A Proof of Concept (PoC) has been provided