Filtered by vendor Kreci
Subscriptions
Filtered by product Subscribers Text Counter
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-3356 | 1 Kreci | 1 Subscribers Text Counter | 2024-10-01 | 4.3 Medium |
| The Subscribers Text Counter WordPress plugin before 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping | ||||
Page 1 of 1.