Medium CVE-2026-7047 The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the funp_ajax_modify_notes function. This makes it possible for unauthenticated...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-7047 – The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request...

VERWANDTEARTIKEL

Critical Hugging Face Transformers Vulnerability Enables Remote Code Execution Attacks

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects

[High] CVE-2026-8901 – The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity For...

[Medium] CVE-2026-9008 – The Page-list plugin for WordPress is vulnerable to Missing Authorization in all...

[Medium] CVE-2026-9281 – The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Buil...