The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
CSRF
Swifty Page Manager
NVD
VulDB
CVSS 3.1
8.8
EPSS
0.2%
PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Pghero
NVD
GitHub
CVSS 3.1
7.5
EPSS
0.8%