WordPress Plugin Vulnerabilities

Centrora Security 3.2.1 - Multiple Admin Actions CSRF

Description

The ose-firewall WordPress plugin was affected by a Multiple Admin Actions CSRF security vulnerability.

Affects Plugins

Plugin icon
ose-firewall
Fixed in 3.3.0

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
bc42f8d2-f927-41d7-a83b-98313ce25181

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 11 years ago)

Other

Published
Title
Published
2014-08-01
Title
Digg Digg 5.3.4 - Setting Manipulation CSRF
Published
2026-06-08
Title
AJAX Report Comments <= 2.0.4 - Cross-Site Request Forgery to Settings Update
Published
2025-01-31
Title
WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection < 3.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-12-27
Title
Job Manager & Career – Manage job board listings, and recruitments < 1.4.5 - Cross-Site Request Forgery to PHP Object Injection
Published
2023-07-17
Title
Falang multilanguage < 1.3.40 - Cross-Site Request Forgery