Medium CVE-2026-9723 The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2. This is due to missing or incorrect nonce validation on the googlePlusOneAdmin function. This makes it possible for unauthenticated attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-9723 – The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Requ...

VERWANDTEARTIKEL

CVE-2026-42588

[Medium] CVE-2026-43924 – FOSSBilling is a free, open-source billing and client management system. Prior t...

[High] CVE-2026-44609 – Local privilege escalation due to EXE hijacking vulnerability. The following pro...

[High] CVE-2026-50033 – Local privilege escalation due to DLL hijacking vulnerability. The following pro...

[Unknown] CVE-2026-37700 – Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attack...

[Medium] CVE-2026-40495 – FOSSBilling is a free, open-source billing and client management system. Version...