3 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2017-20088 – Atahualpa Theme cross-site request forgery

https://notcve.org/view.php?id=CVE-2017-20088

23 Jun 2022 — A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Se ha encontrado una vulnerabilidad clasificada como problemática en Atahualpa Theme. • http://seclists.org/fulldisclosure/2017/Feb/90 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-27948 – WordPress Atahualpa Theme <= 3.7.24 is vulnerable to Cross Site Request Forgery (CSRF)

https://notcve.org/view.php?id=CVE-2024-27948

01 Mar 2017 — Cross-Site Request Forgery (CSRF) vulnerability in bytesforall Atahualpa.This issue affects Atahualpa: from n/a through 3.7.24. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en bytes para todo Atahualpa. Este problema afecta a Atahualpa: desde n/a hasta 3.7.24. The Atahualpa theme for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions up to, and including, 3.7.24 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject a... • https://patchstack.com/database/vulnerability/atahualpa/wordpress-atahualpa-theme-3-7-24-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.1EPSS: 1%CPEs: 32EXPL: 2

CVE-2011-3850 – Atahualpa < 3.6.8 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2011-3850

28 Sep 2011 — Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el tema Atahualpa anteriores a v3.6.8 para WordPress, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro s. • https://www.exploit-db.com/exploits/36178 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •