CVE - API Security Blog

CVE-2023-37266

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

July 17, 2023

CVE-2023-3496

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.Read More ...

July 17, 2023

CVE-2023-31216

Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin Read More ...

July 17, 2023

CVE-2023-2959

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.This issue affects Oliva Expertise EKS: before 1.2.Read More ...

July 17, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2022-4023

The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious reque ...

July 17, 2023

CVE-2023-3376

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Strategy Zekiweb allows SQL Injection.This issue affects Zekiweb: before 2.Read More ...

July 17, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-35096

Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin Read More ...

July 17, 2023

CVE-2023-35089

Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin Read More ...

July 17, 2023