Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
CSRF
WordPress
PHP
SQLi
XSS
+1
NVD
CVSS 2.0
6.8
EPSS
0.2%
The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. No vendor patch available.
Denial Of Service
Xen
NVD
CVSS 2.0
4.9
EPSS
0.1%