Rafasashi vulnerabilities
Products
Newest
- rafasashi user session synchronizer User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters 9.8 Critical
- rafasashi custom new user notification Custom New User Notification <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'User Mail Subject' Setting 4.4 Medium
- rafasashi user session synchronizer WordPress User Session Synchronizer plugin <= 1.4.0 - CSRF to Stored XSS vulnerability 7.1 High
- rafasashi svg captcha WordPress SVG Captcha plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- rafasashi todo custom field WordPress Todo Custom Field plugin <= 3.0.4 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- rafasashi language switcher Language Switcher <= 3.7.13 - Reflected Cross-Site Scripting 6.1 Medium