cbcvebase.

Wickedplugins Wicked Folders vulnerabilities

21 known vulnerabilities affecting wickedplugins/wicked_folders.

Total CVEs
21
CISA KEV
0
Public exploits
0
Exploited in wild
9
Severity breakdown
HIGH1MEDIUM20

Vulnerabilities

Page 2 of 2
CVE-2023-0729P4MEDIUMCVSS 4.3≤ 2.18.162023-06-09
CVE-2023-0729 [MEDIUM] CWE-352 CVE-2023-0729: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_sort_order function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administr
nvd
← Previous2 / 2
Wickedplugins Wicked Folders vulnerabilities | cvebase