bdaia vulnerabilities

Products

• woohoo newspaper magazine theme 1

Latest bdaia CVEs

Newest publication first

1. CVE-2023-4824 WooHoo Newspaper Magazine Theme <= 2.5.3 - Settings Update via CSRF

   Published 2023-11-20

   High·CVSS 8.8 EPSS 0.38%

   The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.