Most recent entries from all

cnvd-2021-10486

EUVD-2026-21728

fkie_cve-2021-20652

Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

GHSA-322w-f24m-rgpr

Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

gsd-2021-20652

jvndb-2021-000012

WordPress Plugin "Name Directory" provided by J. Peters contains a cross-site request forgery vulnerability (CWE-352). Yuta Asai of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.