WordPress Plugin Vulnerabilities

DX-Contribute - Cross-Site Request Forgery

Description

The DX-Contribute WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
dx-contribute
No known fix

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
9322cee4-58e2-4c93-83db-fd110f927c1b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-04-30
Title
NewsBlogger < 0.2.5.5 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Published
2023-09-05
Title
WP Custom Post Template <= 1.0 - Settings Update via CSRF
Published
2021-06-30
Title
MZ MBO Access < 2.0.9 - Unauthorised AJAX call
Published
2025-04-01
Title
Simple Fixed Notice <= 1.6 - Cross-Site Request Forgery
Published
2022-12-01
Title
Sunshine Photo Cart Plugin < 2.9.14 - Image Location Update via CSRF