Lucene search
+L

201 matches found

Patchstack
Patchstack
•added 2025/04/15 2:45 p.m.•14 views

WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Marek Mikita in WordPress Plugin WP Optin Wheel versions = 1.4.7...

5.4CVSS8.4AI score0.00324EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•10 views

PT-2025-16509 · Unknown · Macro Calculator With Admin Email Optin & Data

Name of the Vulnerable Software and Affected Versions: NotFound Macro Calculator with Admin Email Optin & Data versions n/d through 1.0 Description: The issue concerns exposure of sensitive system information to an unauthorized control sphere. This problem affects the Macro Calculator with Admin...

7.5CVSS7.8AI score0.00472EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/03 4:38 p.m.•16 views

CVE-2025-31824

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through = 1.4.7...

5.4CVSS7.2AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 3:16 p.m.•14 views

CVE-2025-31824

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel wp-optin-wheel allows Server Side Request Forgery.This issue affects WP Optin Wheel: from n/a through = 1.4.7...

5.4CVSS0.00324EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 2:51 p.m.•64 views

CVE-2025-31824

CVE-2025-31824 — WP Optin Wheel SSRF (WordPress plugin) Affected: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce (versions from n/a to 1.4.7). Description: Server-Side Request Forgery (SSRF) vulnerability reported in the WP Optin Wheel plugin. The CVSS vector p...

5.4CVSS7.2AI score0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 2:51 p.m.•7 views

CVE-2025-31824 WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel allows Server Side Request Forgery. This issue affects WP Optin Wheel: from n/a through 1.4.7...

5.4CVSS7.2AI score0.00324EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•13 views

WordPress plugin WP Optin Wheel 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

5.4CVSS6.6AI score0.00324EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•13 views

PT-2025-14205 · Wombat Plugins · Wp Optin Wheel

Name of the Vulnerable Software and Affected Versions: Wombat Plugins WP Optin Wheel versions 1.4.7 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially force the...

5.4CVSS6.2AI score0.00324EPSS
SaveExploits0References3
NVD
NVD
•added 2025/01/16 9:15 p.m.•34 views

CVE-2025-23925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jp2112 Feedburner Optin Form feedburner-optin-form allows Stored XSS.This issue affects Feedburner Optin Form: from n/a through = 0.2.8...

6.5CVSS0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•39 views

CVE-2025-23925 WordPress Feedburner Optin Form plugin <= 0.2.8 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jp2112 Feedburner Optin Form feedburner-optin-form allows Stored XSS.This issue affects Feedburner Optin Form: from n/a through = 0.2.8...

6.5CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•67 views

CVE-2025-23925

CVE-2025-23925 concerns a Stored XSS in Feedburner Optin Form (WordPress plugin) due to improper input neutralization during web page generation. Affected: Feedburner Optin Form versions from n/a up to and including 0.2.8. Root cause: improper neutralization of user input leading to cross-site sc...

6.5CVSS7.2AI score0.00298EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•16 views

WordPress Feedburner Optin Form plugin <= 0.2.8 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Feedburner Optin Form versions = 0.2.8...

6.5CVSS5.8AI score0.00298EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•10 views

WordPress plugin Feedburner Optin Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.8AI score0.00298EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/01/07 4:15 p.m.•25 views

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability affects Firefox 134...

3.3CVSS6.6AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/03 11:15 a.m.•25 views

CVE-2024-11326

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00354EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/03 11:04 a.m.•32 views

CVE-2024-11326 Campaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00354EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/03 11:04 a.m.•63 views

CVE-2024-11326

CVE-2024-11326 relates to the WordPress plugin Campaign Monitor Forms by Optin Cat. It describes a Reflected Cross-Site Scripting vulnerability in all versions up to 2.5.7 caused by using add_query_arg without proper escaping on the URL. This enables unauthenticated attackers to inject JavaScript...

6.1CVSS6.1AI score0.00354EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/03 9:32 a.m.•20 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS6.5AI score0.00988EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/03 9:32 a.m.•53 views

CVE-2024-11325 AWeber Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting

The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web script...

5.2CVSS0.00988EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/03 9:32 a.m.•77 views

CVE-2024-11325

CVE-2024-11325 concerns the AWeber Forms by Optin Cat WordPress plugin. It is a Reflected Cross-Site Scripting vulnerability caused by improper escaping of add_query_arg usage, affecting all versions up to and including 2.5.7. Unauthenticated attackers could inject arbitrary scripts into pages ex...

5.2CVSS5.1AI score0.00988EPSS
SaveExploits0References3
Rows per page
Query Builder