Machic Core Vulnerabilities

The Machic Core plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tri...

CVSS:

6.1

Affected:

up to 1.2.6

Fix:

No patched version reported

Disclosed:

Dec 7, 2023

CVE-2023-49186 on NVD →

Multiple plugins and/or themes for WordPress by KlbTheme are vulnerable to Cross-Site Request Forgery in various versions. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a site administ...

CVSS:

4.3

Affected:

up to 1.2.8

Fix:

No patched version reported

Disclosed:

Dec 7, 2023

CVE-2023-49838 on NVD →