Lucene search
+L

1359 matches found

Mend
Mend
•added 2018/01/08 7:00 a.m.•2 views

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

8.8CVSS0.00726EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•6 views

CVE-2018-5288: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

6.1CVSS6.7AI score0.01432EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•5 views

CVE-2018-5284: Improper Neutralization of Input During Web Page Generation

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

4.8CVSS6.1AI score0.00799EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•6 views

CVE-2018-5287: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

7.5CVSS7.2AI score0.03699EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•7 views

CVE-2018-5292: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

6.1CVSS6.7AI score0.01265EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•4 views

CVE-2018-5290: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

7.5CVSS7.2AI score0.03699EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•3 views

CVE-2018-5291: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

7.5CVSS7.2AI score0.03699EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•3 views

PT-2018-16871

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically affecting the gd-rating-system-transfer page. This is related to a parameter in the wp-admin/admin.p...

7.5CVSS0.03699EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•6 views

CVE-2018-5289: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

7.5CVSS7.2AI score0.03699EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•1 views

PT-2018-16868

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically affecting the gd-rating-system-about page. This is related to a parameter in the admin panel...

7.5CVSS0.03699EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•4 views

PT-2018-16872

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically with the gd-rating-system-tools page. This affects the WordPress plugin's functionality...

7.5CVSS0.03699EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•3 views

PT-2018-16874

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a security problem where an attacker can execute malicious scripts on a website. This is achieved through the wp-admin/admin.php panel, specifically by manipulating the paramet...

6.1CVSS0.01265EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•2 views

PT-2018-16867

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Cross-Site Scripting XSS problem. It is related to the wp-admin/admin.php panel parameter for the gd-rating-system-about page. Recommendations For GD Rating System plugin...

6.1CVSS0.01265EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•4 views

PT-2018-16869

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a problem with the GD Rating System plugin for WordPress, where there is a potential for XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

6.1CVSS0.01432EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•7 views

CVE-2018-5286: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

6.1CVSS6.7AI score0.01265EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•5 views

CVE-2018-5285: Cross-Site Request Forgery (CSRF)

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

8.8CVSS7.8AI score0.00726EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/08 12:00 a.m.•3 views

CVE-2018-5293: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

6.1CVSS6.7AI score0.01265EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•4 views

PT-2018-16873

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue allows for XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Recommendations For GD Rating System plugin version 2.3, consider disabling access t...

6.1CVSS0.01265EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•1 views

PT-2018-16870

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically affecting the gd-rating-system-information page. This is related to a parameter in the plugin's...

7.5CVSS0.03699EPSS
SaveExploits1References7
OSV
OSV
•added 2018/01/04 6:29 p.m.•14 views

CVE-2018-5214

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

5.4CVSS5.8AI score0.00595EPSS
SaveExploits1References2
Rows per page
Query Builder