Pardakht Delkhah
Approved changes feed: RSS · Atom
cpe:2.3:a:wp-master:pardakht-delkhah:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wp Master (bf261b67-0827-5b65-a85f-1fa991576b31) |
|---|---|
| Product | Pardakht Delkhah (573f22bd-0987-52c8-b826-6c8eb74d89cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6230 |
vulnerable | 2026-06-08 06:58:18.302575 |
Pardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRF
The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Published: 2024-07-30T06:00:10.533Z
Updated: 2025-03-14T15:54:35.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4307 |
vulnerable | 2026-06-08 05:51:37.174048 |
Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
Published: 2023-01-23T14:31:29.119Z
Updated: 2025-04-02T15:24:55.434Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.