Skip to content
OpenAdvisories

Vendor

sureshchand12a

3 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.3

    CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action

    The CHP Ads Block Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.9.4. This is due to missing or incorrect nonce validation on the chp_abd_action function. This makes it possible for unauthenticate…

  • Medium 4.9

    CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The CHP Ads Block Detector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings reachable though an AJAX action in versions up to, and including, 3.9.4 due to insufficient input sanitization and output escaping. This makes it p…

  • Medium 4.3

    CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update

    The CHP Ads Block Detector plugin for WordPress is vulnerable to unauthorized plugin settings update and reset due to a missing capability check on the chp_abd_action function in versions up to, and including, 3.9.4. This makes it possible for subscriber-leve…