(Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-30. Vendor: Unknown.

CVEs of

• CVE-2024-6230 - CVSS 6.5 (medium), 2024-07-30: The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make…
• CVE-2022-4307 - CVSS 6.1 (medium), 2023-01-23: The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with…
• CVE-2021-24940 - CVSS 6.1 (medium), 2022-03-14: The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which…
• CVE-2021-24410 - CVSS 6.1 (medium), 2021-08-16: The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when…