Pesquisadores
Voltar
Rio Darmawan
#112
de 60,387
1211.2
CVSS total
Vulnerabilidades
·
185
Média
142
Alta
43
PT-2026-52649
2026-06-26
8.8
CVE-2026-50741
Revive
Andserver
Existe uma forma de contornar uma correção anterior. O problema pode ser acionado enviando um identificador de plugin não permitido, mas válido, através da variável `type` ou utilizando o método de API XML-RPC `ox.setChannelTargeting`.
PT-2024-12045
2024-12-09
5.3
CVE-2023-25048
Unknown
Fantastic Content Protector Free
O problema está relacionado a uma vulnerabilidade de falta de autorização, que permite a exploração de níveis de segurança de controle de acesso configurados incorretamente.
PT-2024-12098
2024-12-09
5.3
CVE-2023-26520
Unknown
Max Chirkov Advanced Text Widget
O problema está relacionado à falta de autorização, permitindo a exploração de níveis de segurança de controle de acesso configurados incorretamente.
PT-2024-12950
2024-05-08
6.5
CVE-2023-41651
Unknown
Multi-Column Tag Map
O problema está relacionado a uma vulnerabilidade de falta de autorização no Multi-column Tag Map.
PT-2024-12060
2024-05-03
5.3
CVE-2023-25457
Unknown
Richteam Slider Carousel – Responsive Image Slider
O problema está relacionado a uma vulnerabilidade de falta de autorização no Richteam Slider Carousel – Responsive Image Slider.
PT-2023-21144
2023-11-22
8.8
CVE-2023-27458
WordPress
Xwp Stream
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20708
2023-11-22
8.8
CVE-2023-26532
Accesspress Themes
Accesspress Themes Social Auto Poster
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application.
PT-2023-21143
2023-11-22
8.8
CVE-2023-27457
WordPress
Passionate Brains Add Expires Headers & Optimized Minify
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20693
2023-11-12
8.8
CVE-2023-26514
WordPress
Wpgrim Dynamic Xml Sitemaps Generator
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21609
2023-11-12
8.8
CVE-2023-28173
WordPress
Amit Agarwal Google Xml Sitemap For Images
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21760
2023-11-12
8.8
CVE-2023-28497
Tribulant
Tribulant Slideshow Gallery
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application that a user is authenticated to.
PT-2023-20700
2023-11-12
4.3
CVE-2023-26524
WordPress
Expresstech Quiz/Survey Master
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21129
2023-11-12
8.8
CVE-2023-27441
Unknown
Gl Spice New Adman Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21603
2023-11-12
8.8
CVE-2023-28167
Vsourz Digital
Vsourz Digital Cf7 Invisible Recaptcha Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21249
2023-11-12
8.8
CVE-2023-27611
WordPress
Audrasjb Reusable Blocks Extended
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-20697
2023-11-12
8.8
CVE-2023-26518
Accesspress Themes
Accesspress Themes Wp Tfeed Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21123
2023-11-12
8.8
CVE-2023-27434
WordPress
Wpgrim Classic Editor/Classic Widgets
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21133
2023-11-12
8.8
CVE-2023-27445
Meril
Meril Inc. Blog Floating Button Plugin
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-21125
2023-11-12
8.8
CVE-2023-27436
Unknown
Louis Reingold Elegant Custom Fonts
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user is authenticated to.
PT-2023-22717
2023-11-10
8.8
CVE-2023-30478
Tribulant
Tribulant Newsletters Plugin
The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to.