WordPress Plugin Vulnerabilities

DVS Custom Notification - Cross-Site Request Forgery

Description

The dvs-custom-notification WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
dvs-custom-notification
Fixed in 1.0.1

References

CVE
CVE-2012-4921

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
b069e75b-4214-4f1c-8a9f-98997b25037d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-10-14
Title
IdeaPush < 8.71 - Cross-Site Request Forgery
Published
2024-06-12
Title
Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF
Published
2025-04-01
Title
Ebook Downloader <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-01-02
Title
WP SMS < 6.5.1 - Cross-Site Request Forgery to Subscriber Deletion
Published
2024-01-19
Title
Splashscreen <= 0.20 - Settings Update via CSRF