Realwebcare: Security Vulnerabilities
The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
CVSS Score
7.6
EPSS Score
0.0
Published
2024-06-26
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Realwebcare WRC Pricing Tables plugin <= 2.3.7 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-03