Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.
CSRF
PHP
WordPress
XSS
White Label Cms
NVD
Exploit-DB
CVSS 2.0
6.8
EPSS
1.3%
The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Google
Zoner Antivirus Free
NVD
CVSS 2.0
4.3
EPSS
0.2%