Skip to content
OpenAdvisories

Vendor

xhanch_studio

1 known vulnerabilities.

Products

Xhanch – My Advanced Settings 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-3332

    Xhanch - My Advanced Settings <= 1.1.2 - Cross-Site Request Forgery to Settings Update

    The Xhanch - My Advanced Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing nonce validation in the `xms_setting()` function on the settings update handler. This makes …

    xhanch_studio Xhanch – My Advanced Settings Web / CMS