WordPress Plugin Vulnerabilities

Attendance Manager <= 0.5.6 - CSRF & XSS

Description

The Attendance Manager WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
attendance-manager
Fixed in 0.5.7

References

CVE
CVE-2019-5970
CVE
CVE-2019-5971
URL
https://jvn.jp/en/jp/JVN95685939/index.html
URL
https://plugins.trac.wordpress.org/changeset/2093162/attendance-manager
URL
http://attmgr.com/fixed-vulnerability-issue/

Miscellaneous

Submitter
Ryan Dewhurst
Submitter website
https://wpscan.io
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
20abf7bd-734f-41b7-956a-304e308ab96f

Timeline

Publicly Published
2019-06-10 (about 6 years ago)
Added
2019-07-09 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2018-01-07
Title
Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF
Published
2016-03-11
Title
DZS Videogallery Plugin <= 8.60 - Multiple Vulnerabilities
Published
2015-12-02
Title
Users Ultra Membership Plugin <= 1.5.62 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
Published
2016-11-15
Title
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi
Published
2017-03-01
Title
Contact Form Manager < 1.4.4 - CSRF & Cross-Site Scripting (XSS)