CVE-2025-13605

creationtimestamp| type| source ---|---|--- 2026-05-04 07:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2025-13605 2026-05-04 16:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml24hr7urx2r...

CVE-2019-13605

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

CVE-2024-13605

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13605

creationtimestamp| type| source ---|---|--- 2025-02-24 06:22:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5129 2025-02-24 07:55:30+00:00| seen| https://t.me/cvedetector/18781 2025-02-24 08:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3livx2exbbc2t 2025-02-24...

CVE-2024-13605 Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13605

The CVE-2024-13605 entry concerns Form Maker by 10Web for WordPress, affecting versions prior to 1.15.33. It is a Stored XSS in certain settings due to insufficient sanitisation/escaping, which can be triggered by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (e.g., ...

CVE-2020-13605

CVE-2020-13605 is rejected/not used per the Initial Description.

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Vulnerability

Exploit for linux platform in category web applications Exploit Title: CWP CentOS Control Web Panel ||/us...

CVE-2019-13605

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from...

CVE-2019-13605

CVE-2019-13605 affects CentOS Web Panel (CWP) versions 0.9.8.838–0.9.8.846. The issue is an authentication bypass in the login flow that leverages a valid username and relies on defeating an encoding that is not equivalent to base64, as noted in the NVD entry and CNVD/CNVD-derived records. This i...

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass Exploit Title: CWP CentOS Control Web Panel ||//...

CentOS Control Web Panel 0.9.8.836 Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CVE-2019-13360 ================================...

CentOS Control Web Panel 0.9.8.836 - Authentication Bypass

Exploit Title: CWP CentOS Control Web Panel ||//theme/original CV...

CVE-2018-13605

The CVE-2018-13605 entry concerns the mintToken function in Extreme Token (Extreme Coin) Ethereum contract (ExtremeToken). The root cause is an integer overflow that enables the contract owner to arbitrarily set any user’s balance to a chosen value. Documents consistently describe this vulnerabil...