Lucene search
+L

871 matches found

CNNVD
CNNVD
added 2025/01/04 12:00 a.m.8 views

WordPress plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.7AI score0.00363EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.10 views

WordPress plugin My Wp Brand 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.5AI score0.00317EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/18 12:00 a.m.18 views

PT-2024-16863 · WordPress · Amp For Wp

Name of the Vulnerable Software and Affected Versions: AMP for WP – Accelerated Mobile Pages plugin for WordPress versions prior to 1.1.2 Description: The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the disqus name parameter due t...

6.1CVSS8.7AI score0.00277EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.9 views

WordPress plugin Better WP Login Page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.5AI score0.004EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/14 7:47 p.m.11 views

WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by l8BL Patchstack Alliance in WordPress Plugin Better WP Login Page versions = 1.1.2...

5.9CVSS5.5AI score0.004EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/13 3:15 p.m.15 views

CVE-2024-54321

Cross-Site Request Forgery CSRF vulnerability in Hive Support Hive Support hive-support allows Cross Site Request Forgery.This issue affects Hive Support: from n/a through = 1.1.2...

4.3CVSS0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.14 views

CVE-2024-54304

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through = 1.1.2...

8.5CVSS0.0049EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:25 p.m.11 views

CVE-2024-54321 WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hive Support Hive Support – WordPress Help Desk allows Cross Site Request Forgery.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2...

4.3CVSS7AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:25 p.m.24 views

CVE-2024-54321 WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hive Support Hive Support hive-support allows Cross Site Request Forgery.This issue affects Hive Support: from n/a through = 1.1.2...

4.3CVSS0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:25 p.m.7 views

CVE-2024-54304 WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hive Support Hive Support – WordPress Help Desk allows SQL Injection.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2...

8.5CVSS7.7AI score0.0049EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:25 p.m.25 views

CVE-2024-54304 WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through = 1.1.2...

8.5CVSS0.0049EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.12 views

PT-2024-36185 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

8.5CVSS8AI score0.0049EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.6 views

WordPress plugin Hive Support 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS8.6AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.6 views

WordPress plugin TAX SERVICE Electronic HDM SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability...

10CVSS8.6AI score0.00639EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.10 views

WordPress plugin Hive Support SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS9AI score0.0049EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.13 views

WordPress plugin Analytics Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS8AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/12 12:00 a.m.12 views

PT-2024-17428 · WordPress · Analytics Cat

Name of the Vulnerable Software and Affected Versions: Analytics Cat – Google Analytics Made Easy plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL...

6.1CVSS6.9AI score0.00291EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/12/11 8:41 p.m.8 views

WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin Hive Support versions = 1.1.2...

4.3CVSS7AI score0.00229EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/11 7:42 p.m.10 views

WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Hive Support versions = 1.1.2...

8.5CVSS8.1AI score0.0049EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/28 12:00 a.m.13 views

PT-2024-17239 · WordPress · Legalweb Cloud

Name of the Vulnerable Software and Affected Versions: LegalWeb Cloud plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's legalweb-popup shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6.2AI score0.00318EPSS
SaveExploits0References5
Rows per page
Query Builder