Filtered by vendor Byonepress
Subscriptions
Filtered by product Social Locker
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-1608 | 1 Byonepress | 1 Social Locker | 2024-11-21 | 6.5 Medium |
| The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack | ||||
| CVE-2015-9425 | 1 Byonepress | 1 Social Locker | 2024-11-21 | 5.4 Medium |
| The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter. | ||||
Page 1 of 1.