WordPress Plugin Vulnerabilities

Notices Ticker 5.0 - Cross-Site Request Forgery

Description

The Notices Ticker WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
notices
No known fix

References

URL
https://packetstormsecurity.com/files/#116774/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
dd684464-44cf-43ae-897b-8db57bac24ef

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-11-10
Title
Connexion Logs <= 3.0.2 - Log Deletion via CSRF
Published
2020-07-18
Title
Email Subscribers & Newsletters < 4.5.1 - Cross-site Request Forgery in send_test_email()
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Cross-Site Request Forgery
Published
2025-04-09
Title
WP Performance Pack <= 2.5.4 - Cross-Site Request Forgery
Published
2021-06-08
Title
WP Prayer < 1.6.6 - Cross-Site Request Forgery