Skip to content
OpenAdvisories

Vendor

justin_k

2 known vulnerabilities.

Products

WP-ViperGB 1 WP Social AutoConnect 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-12279

    WP Social AutoConnect <= 4.6.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

    The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to…

    justin_k WP Social AutoConnect Web / CMS
  • Medium 4.3
    CVE-2024-4409

    WP-ViperGB <= 1.6.1 - Cross-Site Request Forgery

    The WP-ViperGB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers…

    justin_k WP-ViperGB Web / CMS