Wp Favorite Posts Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Huseyin Berberoglu WP Favorite Posts.This issue affects WP Favorite Posts: from n/a through 1.6.8.

Affected:

up to 1.6.8

Fix:

No patched version reported

Disclosed:

May 9, 2024

CVE-2024-34427 on NVD →

The WP Favorite Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can...

CVSS:

4.3

Affected:

up to 1.6.8

Fix:

No patched version reported

Disclosed:

May 6, 2024

CVE-2024-34427 on NVD →

Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS:

6.1

Affected:

up to 1.6.5

Fixed in:

1.6.6

Disclosed:

Mar 29, 2016

CVE-2016-1160 on NVD →

[en] Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected:

up to 1.6.6

Fixed in:

1.6.6

Disclosed:

Mar 26, 2016

CVE-2016-1160 on NVD →