WordPress Plugin Vulnerabilities

Knews 1.2.5 - Multilingual Newsletters Cross-Site Request Forgery

Description

The Knews Multilingual Newsletters WordPress plugin was affected by a Multilingual Newsletters Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
knews
Fixed in 1.2.6

References

URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/80661

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
dc02c4ac-ecf7-4ea7-be9a-2f0c06c4aa20

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2019-02-23
Title
Peters Login Redirect <= 2.9.1 - Multiple CSRF
Published
2021-04-30
Title
Download Manager < 3.1.22 - Plugin Settings Change via CSRF
Published
2023-04-19
Title
ShopEngine < 4.1.2 - CSRF
Published
2023-10-24
Title
Quill Forms < 3.4.0 - Cross-Site Request Forgery
Published
2014-08-01
Title
SolveMedia 1.1.0 - plugins.php API Key Manipulation CSRF