WordPress Plugin Vulnerabilities

Codestyling Localization <= 1.99.30 - Multiple CSRF

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
codestyling-localization
No known fix

References

CVE
CVE-2015-4179
URL
https://www.openwall.com/lists/oss-security/2015/06/03/3
URL
https://www.openwall.com/lists/oss-security/2015/06/04/11
URL
https://www.openwall.com/lists/oss-security/2015/06/13/3

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
fb49e853-b2dc-4a02-a52d-34c47b375c3f

Timeline

Publicly Published
2015-06-03 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-09-16
Title
Woody code snippets < 2.3.10 - Arbitrary Settings Update via CSRF
Published
2024-02-27
Title
Gestpay for WooCommerce < 20240307 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card
Published
2024-04-10
Title
Spotlight Social Media Feeds < 1.6.11 - Cross-Site Request Forgery
Published
2024-02-22
Title
Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery
Published
2023-06-27
Title
NOO Timetable <= 2.1.3 - Cross-Site Request Forgery