Lucene search
+L

42 matches found

Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.4 views

CVE-2025-53347 WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through = 3.18.3...

4.3CVSS5.1AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 6:21 p.m.30 views

CVE-2025-53347

CVE-2025-53347 (Kalium) is a CSRF vulnerability in the Kalium WordPress theme (and related plugin) versions n/a through 3.18.3. The CVE notes that unauthenticated attackers cannot exploit it directly, but the related CVE metrics show an attack vector of network with user interaction required and ...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 6:21 p.m.21 views

CVE-2025-53347 WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through = 3.18.3...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.5 views

CVE-2025-54054 WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS5.2AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 6:21 p.m.26 views

CVE-2025-54054

CVE-2025-54054 : WordPress plugin “12 Step Meeting List” is affected by a Stored XSS due to improper input neutralization during web page generation. Affected versions are 12 Step Meeting List up to 3.18.3. Connected sources confirm this as a real vulnerability entry and indicate a patch exists; ...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 6:21 p.m.20 views

CVE-2025-54054 WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS0.00215EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/14 4:17 p.m.16 views

WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Kalium versions = 3.18.3...

4.3CVSS6.8AI score0.0014EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.16 views

PT-2025-33375 · Laborator · Kalium

Name of the Vulnerable Software and Affected Versions: Kalium versions n/a through 3.18.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Laborator Kalium, allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update Kalium to a version...

4.3CVSS6.4AI score0.0014EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/08/14 12:00 a.m.14 views

WordPress Kalium Theme <= 3.18.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kalium Type Theme Vulnerable versions = 3.18.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53347 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 959fedc4e441 Credits Ananda Dhakal Patchstack...

4.3CVSS7AI score0.0014EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/07/03 12:00 a.m.5 views

OPENSUSE-SU-2025:15228-1 helm-3.18.3-1.1 on GA media

These are all security issues fixed in the helm-3.18.3-1.1 package on the GA media of openSUSE Tumbleweed...

6.5CVSS7.2AI score0.00535EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/06/30 12:00 a.m.4 views

openSUSE Security Advisory (SUSE-SU-2025:02121-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.00535EPSS
SaveExploits0References4
OSV
OSV
added 2025/06/28 6:00 a.m.5 views

SUSE-SU-2025:20457-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.18.3: builddeps: bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc dependabotbot fix: user username password for login 5b9e2f6 Terry Howe Update pkg/registry/transport.go 2782412 Terry Howe Update pkg/registry/transport.go...

6.5CVSS7.1AI score0.00535EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/01/04 2:02 p.m.10 views

WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Kalium versions = 3.18.3...

6.1CVSS6.2AI score0.00219EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/02/29 1:43 a.m.10 views

CVE-2024-0506

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $instancealt parameter in the getimagealt function in all versions up to, and including, 3.18.3 due to insufficient input sanitization and output escaping. Th...

5.4CVSS6AI score0.00463EPSS
SaveExploits0References4
OSV
OSV
added 2023/12/29 2:15 p.m.8 views

CVE-2023-51411

Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3...

9.8CVSS5.8AI score0.00617EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.10 views

PT-2023-31812 · Dynamiapps · Frontend Admin

Name of the Vulnerable Software and Affected Versions: Frontend Admin by DynamiApps versions n/a through 3.18.3 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in Frontend Admin by DynamiApps. This allows for the upload of files with potential...

10CVSS9.3AI score0.00617EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2023/12/27 12:00 a.m.17 views

WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload

Software Frontend Admin by DynamiApps Type Plugin Vulnerable versions = 3.18.3 Fixed in 3.18.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-51411 Patch priority High CVSS severity High 10 Developer Claim ownership PSID d641d57f3a44 Credits Rafie Muhammad Patchstack...

10CVSS6.8AI score0.00617EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/19 12:00 a.m.30 views

EulerOS 2.0 SP10 : protobuf (EulerOS-SA-2023-1537)

According to the versions of the protobuf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1...

7.5CVSS7.1AI score0.01223EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/12/08 1:25 p.m.110 views

Moderate: Red Hat Security Advisory: Red Hat Camel for Spring Boot 3.18.3 release and security update

A minor version update from 3.14.5 to 3.18.3 is now available for Camel for Spring Boot. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

9.8CVSS7AI score0.99931EPSS
SaveExploits42References5
OSV
OSV
added 2022/09/22 3:15 p.m.16 views

AZL-35018 CVE-2022-1941 affecting package mysql for versions less than 8.0.40-1

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of...

7.5CVSS6.9AI score0.01223EPSS
SaveExploits0References1
Rows per page
Query Builder