WordPress Plugin Vulnerabilities

Simplelife <= 1.2 - Multiple CSRF

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
simplelife
No known fix

References

CVE
CVE-2014-9395
URL
https://packetstormsecurity.com/files/#129641/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
30f49402-b3b2-4bcf-a0c6-e83b4ed7a60f

Timeline

Publicly Published
2014-12-18 (about 11 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-08-09
Title
Christmasify! < 1.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-05-16
Title
Element Pack Pro < 8.0.0 - Cross-Site Request Forgery
Published
2025-07-23
Title
Affiliate Plus <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2021-12-21
Title
Simple Download Monitor < 3.9.9 - Multiple CSRF
Published
2023-11-23
Title
Simple Testimonials Showcase <= 1.1.5 - Cross-Site Request Forgery