CyberSecBulletin

Deano1987 vulnerabilities

We track 2 vulnerabilities in Deano1987 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2024.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Deano1987 vulnerabilities

  • 8.8 High severity

    Advanced AJAX Page Loader: Cross-Site Request Forgery

    CVE-2024-6310Deano1987

    The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.7.7. This is due to missing nonce validation in the 'admin_init_AAPL' function and missing file type val

  • 9.8 Critical severity

    Montonio for WooCommerce: Server-Side Request Forgery

    CVE-2022-40700Montonio

    Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio Woo