Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-6230 | 1 Wp-master | 1 Pardakht-delkhah | 2026-01-02 | N/A | 6.5 MEDIUM |
| The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make a logged in admin perform such action via a CSRF attack | |||||
| CVE-2022-4307 | 1 Wp-master | 1 Pardakht-delkhah | 2025-04-02 | N/A | 6.1 MEDIUM |
| The ?????? ?????? ?????? WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin. | |||||