Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Dandyid Services Project Subscribe
Filtered by product Dandyid Services
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-9335 1 Dandyid Services Project 1 Dandyid Services 2017-09-07 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) email_address or (2) sidebarTitle parameter in the dandyid-services.php page to wp-admin/options-general.php.