Zatzlabs

My Private Site

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-0978

  • EPSS 0.38%
  • Published 29.02.2024 01:43:33
  • Last modified 04.03.2025 12:24:19

The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's site privacy feature a...

4.3

CVE-2022-1627

Exploit
  • EPSS 0.1%
  • Published 27.06.2022 09:15:09
  • Last modified 21.11.2024 06:41:07

The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack