Total
5841 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-45905 | 1 Dreamer Cms Project | 1 Dreamer Cms | 2023-10-18 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add. | |||||
| CVE-2023-45904 | 1 Dreamer Cms Project | 1 Dreamer Cms | 2023-10-18 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update. | |||||
| CVE-2023-45903 | 1 Dreamer Cms Project | 1 Dreamer Cms | 2023-10-18 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete. | |||||
| CVE-2023-45902 | 1 Dreamer Cms Project | 1 Dreamer Cms | 2023-10-18 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete. | |||||
| CVE-2023-45901 | 1 Dreamer Cms Project | 1 Dreamer Cms | 2023-10-18 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add. | |||||
| CVE-2023-45109 | 1 Myback.link | 1 Whitepage | 2023-10-18 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in ZAKSTAN WhitePage plugin <= 1.1.5 versions. | |||||
| CVE-2022-47372 | 1 Pandorafms | 1 Pandora Fms | 2023-10-18 | N/A | 5.4 MEDIUM |
| Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload. | |||||
| CVE-2023-45063 | 1 Rayhan1 | 1 Ai Content Writing Assistant | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in ReCorp AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatGPT, Image Generator) All in One plugin <= 1.1.5 versions. | |||||
| CVE-2023-45060 | 1 Fla-shop | 1 Interactive World Map | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com Interactive World Map plugin <= 3.2.0 versions. | |||||
| CVE-2023-45058 | 1 Kaizencoders | 1 Short Url | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions. | |||||
| CVE-2023-45052 | 1 Dan009 | 1 Wp Bing Map Pro | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in dan009 WP Bing Map Pro plugin < 5.0 versions. | |||||
| CVE-2023-45048 | 1 Repuso | 1 Repuso | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin <= 5.00 versions. | |||||
| CVE-2023-45011 | 1 Websivu | 1 Wp Power Stats | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Igor Buyanov WP Power Stats plugin <= 2.2.3 versions. | |||||
| CVE-2023-44998 | 1 Randyhoyt | 1 Category Meta | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, Tom Ransom Category Meta plugin plugin <= 1.2.8 versions. | |||||
| CVE-2023-45108 | 1 Mailrelay | 1 Mailrelay | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Mailrelay plugin <= 2.1.1 versions. | |||||
| CVE-2023-45107 | 1 Goodbarber | 1 Goodbarber | 2023-10-17 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in GoodBarber plugin <= 1.0.22 versions. | |||||
| CVE-2023-44997 | 1 Nitinrathod | 1 Wp Forms Puzzle Captcha | 2023-10-16 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin <= 4.1 versions. | |||||
| CVE-2023-25989 | 1 Mekshq | 10 Meks Audio Player, Meks Easy Ads Widget, Meks Easy Maps and 7 more | 2023-10-16 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup. | |||||
| CVE-2023-43149 | 1 Spa-cart | 1 Spa-cart | 2023-10-16 | N/A | 8.8 HIGH |
| SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status. | |||||
| CVE-2023-45106 | 1 Urvanov | 1 Urvanov Syntax Highlighter | 2023-10-16 | N/A | 8.8 HIGH |
| Cross-Site Request Forgery (CSRF) vulnerability in Fedor Urvanov, Aram Kocharyan Urvanov Syntax Highlighter plugin <= 2.8.33 versions. | |||||