Lucene search
+L

2151 matches found

WPVulnDB
WPVulnDB
•added 2023/10/18 12:00 a.m.•19 views

YouTube Playlist Player < 4.6.8 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.7AI score0.00358EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•19 views

WordPress Plugin YouTube Playlist Player Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6AI score0.00358EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/10/17 12:00 a.m.•17 views

Video Playlist For YouTube <= 6.1 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS8.7AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/16 9:15 a.m.•14 views

CVE-2023-45653

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/16 9:15 a.m.•32 views

CVE-2023-45653

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/16 9:15 a.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/16 8:43 a.m.•13 views

CVE-2023-45653 WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

4.3CVSS8.8AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/16 8:43 a.m.•38 views

CVE-2023-45653 WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/16 8:43 a.m.•78 views

CVE-2023-45653

CVE-2023-45653 covers a CSRF vulnerability in the WordPress plugin “Video Playlist For YouTube” by Galaxy Weblinks, affected in versions

8.8CVSS6.4AI score0.00214EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•8 views

CVE-2023-45653: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin = 6.0 versions...

8.8CVSS7.9AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•5 views

PT-2023-29628

Name of the Vulnerable Software and Affected Versions Galaxy Weblinks Video Playlist For YouTube plugin versions prior to 6.0 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintend...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/16 12:00 a.m.•18 views

WordPress Plugin Video Playlist For YouTube Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
HackRead
HackRead
•added 2023/10/15 7:06 p.m.•41 views

YouTube Takes on Ad Blockers with Warning Pop-Ups

By Waqas Using YouTube? You might need to disable your ad blocker or whitelist YouTube.com. This is a post from HackRead.com Read the original post: YouTube Takes on Ad Blockers with Warning Pop-Ups...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2023/10/14 3:56 p.m.•452 views

Exploit for CVE-2023-38646

CVE-2023-38646 - Metabase Pre-Auth RCE ⚠️ For educatio...

9.8CVSS9.7AI score0.98677EPSS
SaveExploits37
Patchstack
Patchstack
•added 2023/10/12 12:00 a.m.•28 views

WordPress Video Playlist For YouTube Plugin <= 6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Video Playlist For YouTube Type Plugin Vulnerable versions = 6.1 Fixed in 6.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45653 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1ce353f93318 Credits Mika Require...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
•added 2023/10/04 5:31 p.m.•37 views

Stream-Jacking: Malicious YouTube Livestreams Aid Malware, Crypto Scams

By Deeba Ahmed Bitdefender reports a surge in Stream-Jacking attacks on popular YouTube channels, distributing crypto scams and information stealers such as Redline. This is a post from HackRead.com Read the original post: Stream-Jacking: Malicious YouTube Livestreams Aid Malware, Crypto Scams...

6.8AI score
SaveExploits0
OSV
OSV
•added 2023/10/03 2:15 p.m.•18 views

CVE-2023-40558

Cross-Site Request Forgery CSRF vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin = 3.3.5 versions...

8.8CVSS7.3AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/03 2:15 p.m.•34 views

CVE-2023-40558

Cross-Site Request Forgery CSRF vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin = 3.3.5 versions...

8.8CVSS6.5AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/03 2:15 p.m.•29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin = 3.3.5 versions...

6.8CVSS8.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/03 1:29 p.m.•22 views

CVE-2023-40558 WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin = 3.3.5 versions...

5.4CVSS7.1AI score0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder