CVE-2023-47230 - Exploiting CSRF in Cimatti Consulting WordPress Contact Forms Plugin (<= v1.6.)
On November 20, 2023, a serious vulnerability was disclosed for the "Contact Forms by Cimatti" WordPress plugin (by Cimatti Consulting). Tagged as CVE-2023-47230,
CVE-2023-46636 - CSRF Vulnerability in Custom Header Images WordPress Plugin (<= 1.2.1) Explained
> Cross-Site Request Forgery (CSRF) issues may seem like a thing of the past, but new vulnerabilities pop up all the time. One such vulnerability
CVE-2023-46638 - Breaking Down the CSRF Vulnerability in Webcodin WCP OpenWeather Plugin (Versions ≤ 2.5.)
If you run a WordPress site, you probably use plugins to add cool features. But sometimes, these plugins open up your site to cyberattacks. One
CVE-2023-46619 - Deep Dive into the CSRF Vulnerability in WebDorado WDSocialWidgets Plugin (<= 1..15)
---
Introduction
If you’re running a WordPress site and using the WebDorado WDSocialWidgets plugin, this post is for you. Let’s break down CVE-2023-46619,
CVE-2023-47229 - Stored XSS in Top 25 Social Icons Plugin (<=3.1) — How Contributors Can Exploit It
CVE-2023-47229 is a stored Cross-Site Scripting (XSS) vulnerability found in the “Top 25 Social Icons” WordPress plugin, versions up to and including 3.1, developed
Episode
00:00:00
00:00:00