Vulnerabilities > Apasionados

DATE CVE VULNERABILITY TITLE RISK
2023-12-15 CVE-2023-49197 Cross-Site Request Forgery (CSRF) vulnerability in Apasionados Dofollow Case BY Case
Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2.
network
low complexity
apasionados CWE-352
8.8
2022-09-23 CVE-2022-38061 Improper Neutralization of Formula Elements in a CSV File vulnerability in Apasionados Export Post Info
Authenticated (author+) CSV Injection vulnerability in Export Post Info plugin <= 1.2.0 at WordPress.
network
low complexity
apasionados CWE-1236
5.7
2022-09-09 CVE-2022-38068 Cross-site Scripting vulnerability in Apasionados Export Post Info
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress.
network
low complexity
apasionados CWE-79
4.8
2022-03-10 CVE-2021-33851 Cross-site Scripting vulnerability in Apasionados Customize Login Image 3.4
A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack.
network
low complexity
apasionados CWE-79
5.4