Skip to content
OpenAdvisories

Vendor

theperfectwedding

1 known vulnerabilities.

Products

ThePerfectWedding.nl Widget 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-12322

    ThePerfectWedding.nl Widget <= 2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauth…

    theperfectwedding ThePerfectWedding.nl Widget Web / CMS