14 matches found
CVE-2025-13657
The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handlequeryargs function. This makes it possible for unauthenticated attackers to update the plugin's...
CVE-2025-13657
creationtimestamp| type| source ---|---|--- 2026-01-07 08:25:35+00:00| seen| https://gist.github.com/Darkcrai86/d3f5f680fa1665b8c4077a121324da92...
EUVD-2018-13657
Malware in sbrugna...
CVE-2024-13657
The Store Locator Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'storelocatorwidget' shortcode in all versions up to, and including, 2025r1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...
CVE-2024-13657
creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdk2delf2g 2025-02-19 08:41:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4784 2025-02-19 15:39:52+00:00| seen|...
CVE-2024-13657 Store Locator Widget <= 2025r1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Store Locator Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'storelocatorwidget' shortcode in all versions up to, and including, 2025r1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...
CVE-2024-13657
CVE-2024-13657 concerns the Store Locator Widget plugin for WordPress. It is vulnerable to a Stored Cross-Site Scripting (XSS) via the plugin’s ‘storelocatorwidget’ shortcode in all versions up to and including 20200131, due to insufficient input sanitization and output escaping on user-supplied ...
CVE-2020-13657
creationtimestamp| type| source ---|---|--- 2020-07-01 11:32:41+00:00| published-proof-of-concept| https://t.me/avdno/792...
CVE-2020-13657
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files...
CVE-2020-13657
CVE-2020-13657 affects Avast Free Antivirus and AVG AntiVirus Free prior to 20.4. The root cause is improper handling of hard links that enables a local user to elevate privileges and potentially control arbitrary files. Affected component scope is the antivirus suites for Windows as described in...
CVE-2017-13657
CVE-2017-13657 entry is rejected/not used and does not represent an active vulnerability.
CVE-2019-13657
CVE-2019-13657 affects CA Performance Management 3.5.x, 3.6.x prior to 3.6.9, and 3.7.x prior to 3.7.4. The issue is a default credential vulnerability that allows a remote attacker to execute arbitrary commands and compromise system security. Connected documents corroborate affected products and...
CVE-2018-13657
CVE-2018-13657 concerns the Rice Ethereum token. The mintToken function in its smart contract has an integer overflow vulnerability that lets the contract owner set any user’s balance to an arbitrary value, enabling unauthorized balance manipulation. No remediation details are provided in the con...