WordPress Plugin Vulnerabilities

Citizen Space 1.0 - Script Insertion CSRF

Description

The citizen-space WordPress plugin was affected by a Script Insertion CSRF security vulnerability.

Affects Plugins

Plugin icon
citizen-space
Fixed in 1.1

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
17ea0a23-b36d-4db1-bf26-58d2c6049360

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 11 years ago)

Other

Published
Title
Published
2025-08-19
Title
Backup Bolt <= 1.4.1 - Cross-Site Request Forgery
Published
2025-10-24
Title
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) < 1.1.23.1 - Cross-Site Request Forgery to Sync Rule Creation
Published
2024-12-12
Title
Like in Vk.com <= 0.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-06-13
Title
Securimage-WP <= 3.6.16 - Cross-Site Request Forgery
Published
2023-08-22
Title
Post and Page Builder by BoldGrid < 1.24.2 - Editor Settings Update via CSRF