wicked_folders Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wicked_folders/ Wed, 22 Feb 2023 14:02:16 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png wicked_folders Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wicked_folders/ 32 32 CVE-2023-0719 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0719/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0719 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder […]

The post CVE-2023-0719 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.

The post CVE-2023-0719 appeared first on CVE Vulnerability.

]]> CVE-2023-0730 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0730/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0730 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder_order function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0730 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder_order function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0730 appeared first on CVE Vulnerability.

]]> CVE-2023-0728 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0728/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0728 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0728 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0728 appeared first on CVE Vulnerability.

]]> CVE-2023-0727 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0727/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0727 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_delete_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0727 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_delete_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0727 appeared first on CVE Vulnerability.

]]> CVE-2023-0726 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0726/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0726 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_edit_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0726 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_edit_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0726 appeared first on CVE Vulnerability.

]]> CVE-2023-0725 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0725/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0725 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_clone_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0725 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_clone_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0725 appeared first on CVE Vulnerability.

]]> CVE-2023-0724 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0724/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0724 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_add_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0724 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_add_folder function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0724 appeared first on CVE Vulnerability.

]]> CVE-2023-0723 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0723/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0723 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_move_object function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0723 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_move_object function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0723 appeared first on CVE Vulnerability.

]]> CVE-2023-0722 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0722/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0722 The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_state function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing […]

The post CVE-2023-0722 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_state function. This makes it possible for unauthenticated attackers to invoke this function via forged request granted they can trick a site administrator into performing an action such as clicking on a link leading them to perform actions intended for administrators such as changing the folder structure maintained by the plugin.

The post CVE-2023-0722 appeared first on CVE Vulnerability.

]]> CVE-2023-0720 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0720/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0720 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder […]

The post CVE-2023-0720 appeared first on CVE Vulnerability.

]]> The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.

The post CVE-2023-0720 appeared first on CVE Vulnerability.

]]>