Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:پلاگین_پرداخت_دلخواه:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
Productپلاگین پرداخت دلخواه (82102b96-7142-53be-8afd-3fdb8e9c3b08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6230 vulnerable 2026-06-08 06:58:18.301303 Pardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRF
The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Published: 2024-07-30T06:00:10.533Z
Updated: 2025-03-14T15:54:35.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4307 vulnerable 2026-06-08 05:51:37.173016 Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
Published: 2023-01-23T14:31:29.119Z
Updated: 2025-04-02T15:24:55.434Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.