Bridge Edwiser Bridge

Do you want an email whenever new security vulnerabilities are reported in Edwiser Bridge?

By the Year

In 2024 there have been 0 vulnerabilities in Edwiser Bridge . Last year Bridge had 2 security vulnerabilities published. Right now, Bridge is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 2 8.80
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Bridge vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Edwiser Bridge Security Vulnerabilities

The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6

CVE-2021-4399 8.8 - High - July 01, 2023

The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect nonce validation on the user_data_synchronization_initiater(), course_synchronization_initiater(), users_link_to_moodle_synchronization(), connection_test_initiater(), admin_menus(), and subscribe_handler() function. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Session Riding

** REJECT ** CVE split into individual CVE IDs for each software record.

CVE-2021-4342 - June 07, 2023

** REJECT ** CVE split into individual CVE IDs for each software record.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Rucyproject Rucy or by Edwiser? Click the Watch button to subscribe.

Edwiser
Vendor

subscribe