Skip to content
OpenAdvisories

Vendor

wpsolutions

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    Font Pairing Preview For Landing Pages <= 1.3 - Cross-Site Request Forgery to Settings Update

    The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for una…

  • Medium 4.3

    WordPress WP SoundCloud Ultimate plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpsolutions SoundCloud Ultimate soundcloud-ultimate allows Cross Site Request Forgery.This issue affects SoundCloud Ultimate: from n/a through <= 1.5.