Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.1 views

CVE-2026-32512

Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a through 1.10...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:31 p.m.2 views

CVE-2025-32512

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...

7.1CVSS7.2AI score0.00669EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.4 views

CVE-2025-32512

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...

7.1CVSS0.00669EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.11 views

CVE-2025-32512 WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...

7.1CVSS0.00669EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.5 views

CVE-2025-32512 WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revampcrm Revamp CRM for WooCommerce revampcrm-woocommerce allows Reflected XSS.This issue affects Revamp CRM for WooCommerce: from n/a through = 1.1.2...

7.1CVSS8.6AI score0.00669EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.46 views

CVE-2025-32512

CVE-2025-32512 affects the WordPress plugin Revamp CRM for WooCommerce (versions n/a–1.1.2). It is a Reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient input neutralization during web page generation. An attacker could exploit the reflected XSS to inject scripts via user-co...

7.1CVSS7.2AI score0.00669EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/10 12:29 p.m.4 views

WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv in WordPress Plugin Revamp CRM for WooCommerce versions = 1.1.2...

7.1CVSS6.9AI score0.00669EPSS
Exploits0Affected Software1
CVE
CVE
added 2024/05/17 8:56 a.m.47 views

CVE-2024-32512

The CVE-2024-32512 entry concerns the WordPress weForms plugin (versions up to and including 1.6.20) with a Form Submission Restriction Bypass issue caused by Client-Side Enforcement of Server-Side Security. Affected component: weForms form submission logic; root cause: client-side enforcement al...

5.3CVSS6.8AI score0.0029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 8:56 a.m.13 views

CVE-2024-32512 WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability

Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a through 1.6.20...

5.3CVSS6.9AI score0.0029EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.9 views

WordPress weForms Plugin <= 1.6.20 is vulnerable to Bypass Vulnerability

Software weForms Type Plugin Vulnerable versions = 1.6.20 Fixed in 1.6.21 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32512 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID afd56fb1f506 Credits Kyle Sanchez Required privilege...

5.3CVSS6.6AI score0.0029EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/11/09 10:15 p.m.8 views

CVE-2023-32512

Cross-Site Request Forgery CSRF vulnerability in ShortPixel ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin = 3.7.1 versions...

8.8CVSS0.0007EPSS
Exploits0References1
CVE
CVE
added 2023/11/09 9:21 p.m.32 views

CVE-2023-32512

CVE-2023-32512 is a CSRF vulnerability in the WordPress plugin ShortPixel Adaptive Images (WebP, AVIF, CDN, Image Optimization) vulnerable through versions

8.8CVSS8.9AI score0.0007EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/05/09 12:0 a.m.9 views

WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software ShortPixel Adaptive Images Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32512 Patch priority Low CVSS severity Low 4.3 Developer ShortPixel PSID 1c9663150338 Credits konagash...

8.8CVSS6.6AI score0.0007EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/01/31 2:42 a.m.0 views

CVE-2022-32512

creationtimestamp| type| source ---|---|--- 2023-01-31 02:42:55+00:00| seen| https://t.me/cibsecurity/57186...

7.8CVSS7.5AI score0.00144EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/01/30 12:0 a.m.12 views

CVE-2022-32512

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. Affected Products: CanBRASS Versions prior to V7.5.1...

5.3CVSS8.2AI score0.00144EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/30 12:0 a.m.5 views

CVE-2022-32512

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. Affected Products: CanBRASS Versions prior to V7.5.1...

5.3CVSS8.1AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2023/01/30 12:0 a.m.47 views

CVE-2022-32512

The CVE-2022-32512 issue affects Schneider Electric CanBRASS prior to version V7.5.1. It is a CWE-119 memory-buff­er handling vulnerability that could enable remote code execution when an exploit command is used. The root cause is improper restriction of operations within the bounds of a memory b...

7.8CVSS8AI score0.00144EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/07/07 2:11 p.m.47 views

CVE-2021-32512

CVE-2021-32512 affects QSAN Storage Manager’s QuickInstall function, where improper filtering of special parameters allows remote, unauthenticated command execution. The vulnerability exists in QSAN Storage Manager 3.3.1 and earlier; exploitation could enable arbitrary commands to run on the NAS ...

9.8CVSS9.8AI score0.01174EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/07 2:11 p.m.13 views

CVE-2021-32512 QSAN Storage Manager - Command Injection Following via QuickInstall function

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

9.8CVSS9.9AI score0.01174EPSS
Exploits0References1
Rows per page
Query Builder