Read the docs

Webmaster-source

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Webmaster-source records in CISA KEV

No Webmaster-source vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gocodes 2 records MEDIUM Wp125 2 records LOW

Records

2 records in Wp125 · all components

TI-2021-07351 CVE-2021-25073 · GHSA-rpjj-pchp-g423

WP125 < 1.5.5 - Arbitrary Ad Deletion via CSRF

Priority LOW 39

The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in admin delete them via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00683 Published 2022-01-24 Fixed in 1.5.5 CWE-352
TI-2013-02361 CVE-2013-2700 · GHSA-j27r-gmgx-jgq3

Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests tha…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0119 Published 2014-05-14 No fix listed CWE-352
Open these records in search →