Css3 Rotating Words Vulnerabilities

[en] Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through 5.4.

Affected:

up to 5.5

Fixed in:

5.5

Disclosed:

Jan 2, 2025

CVE-2023-47187 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Animated Rotating Words allows Cross Site Request Forgery.This issue affects Animated Rotating Words: from n/a through 5.6.

Affected:

up to 5.7

Fixed in:

5.7

Disclosed:

Jan 2, 2025

CVE-2024-38753 on NVD →

The Dynamic Word Spinner: CSS3 Animated Rotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6. This is due to missing or incorrect nonce validation on the save_admin_options() function. This makes it possible for unauthenticated attackers to update plugin se...

CVSS:

4.3

Affected:

up to 5.6

Fixed in:

5.7

Disclosed:

Jul 11, 2024

CVE-2024-38753 on NVD →

The Animated Rotating Words (Interchanging Random Words in a Sentence) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4. This is due to missing or incorrect nonce validation on the save_admin_options function. This makes it possible for unauthenticated attackers...

CVSS:

4.3

Affected:

up to 5.4

Fixed in:

5.5

Disclosed:

Nov 3, 2023

CVE-2023-47187 on NVD →

The Animated Rotating Words plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_admin_options function in versions up to, and including, 5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugin...

CVSS:

4.3

Affected:

up to 5.4

Fixed in:

5.5

Disclosed:

Nov 3, 2023

CVE-2023-47187 on NVD →