Skip to content
OpenAdvisories

Vendor

neo2oo5

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    Neos Connector for Fakturama <= 0.0.14 - Cross-Site Request Forgery to Settings Update

    The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14. This is due to missing nonce validation in the ncff_add_plugin_page() function which handles settings updates. This m…