Skip to content
OpenAdvisories

Vendor

marubon

2 known vulnerabilities.

Products

Pocket News Generator 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-2964

    Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update

    The Pocket News Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.0. This is due to missing or incorrect nonce validation on the option_page() function. This makes it possible for unauthentica…

    marubon Pocket News Generator Web / CMS
  • Medium 4.4
    CVE-2024-2963

    Pocket News Generator <= 0.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Pocket News Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings such as "Consumer Key" and "Access Token" in all versions up to, and including, 0.2.0 due to insufficient input sanitization and output escaping. Th…

    marubon Pocket News Generator Web / CMS