Lucene search

K

This Security Vulnerabilities

cve
cve

CVE-2024-33930

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through...

4.7CVSS

6.7AI Score

0.001EPSS

2024-05-02 11:15 AM
26
cve
cve

CVE-2023-28696

Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend Tplugin <= 3.9.0...

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-12 10:15 PM
37
cve
cve

CVE-2023-34026

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BrokenCrust This Day In History plugin <= 3.10.1...

7.1CVSS

6AI Score

0.001EPSS

2023-06-12 04:15 PM
11
cve
cve

CVE-2023-23673

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3...

5.9CVSS

4.8AI Score

0.0005EPSS

2023-05-16 09:15 AM
14
cve
cve

CVE-2014-125099

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to...

9.8CVSS

9.8AI Score

0.001EPSS

2023-04-20 06:15 AM
14
cve
cve

CVE-2015-10028

A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of the component Main Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

6.1CVSS

6.1AI Score

0.001EPSS

2023-01-07 07:15 PM
21
cve
cve

CVE-2020-9049

A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid...

7.1CVSS

5.5AI Score

0.001EPSS

2020-11-19 04:15 PM
36
cve
cve

CVE-2014-10376

The i-recommend-this plugin before 3.7.3 for WordPress has SQL...

9.8CVSS

9.9AI Score

0.001EPSS

2019-08-16 09:15 PM
324
cve
cve

CVE-2017-18015

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url...

6.1CVSS

6AI Score

0.001EPSS

2018-01-02 03:29 AM
24
cve
cve

CVE-2013-3523

SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the...

8.3AI Score

0.002EPSS

2013-05-10 09:55 PM
28