CVE-2024-3478
Published May 2, 2024The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such…
Vendor/product archive
wow-company / herd_effects CVEs
Beta · best-effort4 CVEs tagged to wow-company / herd_effects — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2023-4318
Published Sep 11, 2023The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrary effects via a CSRF…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-4022
Published Sep 11, 2023The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…
CVE-2023-2362
Published Jun 12, 2023The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-4 of 4 CVEsPage 1 of 1