Search vulnerabilities

Results 2

Export CSV
CVE-2024-8047

Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
CVE-2024-7859

Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed