Lucene search
+L

43 matches found

Vulnrichment
Vulnrichment
•added 2026/08/18 1:59 p.m.•14 views

CVE-2026-32547 WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2022-32547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at...

7.8CVSS7.3AI score0.01394EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/11 5:29 p.m.•18 views

CVE-2025-32547

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS7.3AI score0.00221EPSS
SaveExploits0References1
Circl
Circl
•added 2025/04/09 7:48 p.m.•16 views

CVE-2025-32547

creationtimestamp| type| source ---|---|--- 2025-04-09 19:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114309735026280224...

8.2CVSS6.9AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 5:15 p.m.•19 views

CVE-2025-32547

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 4:09 p.m.•6 views

CVE-2025-32547 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS7.3AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•63 views

CVE-2025-32547

CVE-2025-32547 affects the WordPress plugin “All push notification for WP” (versions up to 1.5.3). The issue is described as a CSRF-to-SQL Injection vulnerability with an unpatched status in the public reports. The connected Wordfence post lists this CVE under “All push notification for WP

8.2CVSS7.3AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•26 views

CVE-2025-32547 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS0.00221EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/09 3:56 p.m.•14 views

WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin All push notification for WP versions = 1.5.3...

8.2CVSS8.9AI score0.00221EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/07/26 12:00 a.m.•36 views

Ubuntu 20.04 LTS / 22.04 LTS : ImageMagick vulnerabilities (USN-6200-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6200-2 advisory. USN-6200-1 fixed vulnerabilities in ImageMagick. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. This...

5.5CVSS6.6AI score0.00955EPSS
SaveExploits2References3
Ubuntu
Ubuntu
•added 2024/07/25 11:55 p.m.•78 views

USN-6200-2: ImageMagick vulnerabilities

USN-6200-1 fixed vulnerabilities in ImageMagick. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. This update fixes the problem. Original advisory details: It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected...

5.5CVSS7AI score0.00955EPSS
SaveExploits2
NVD
NVD
•added 2024/04/17 8:15 a.m.•29 views

CVE-2024-32547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond Code Insert Manager Q2W3 Inc Manager allows Reflected XSS.This issue affects Code Insert Manager Q2W3 Inc Manager: from n/a through 2.5.3...

5.8CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/17 8:12 a.m.•40 views

CVE-2024-32547 WordPress Code Insert Manager (Q2W3 Inc Manager) plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond Code Insert Manager Q2W3 Inc Manager allows Reflected XSS.This issue affects Code Insert Manager Q2W3 Inc Manager: from n/a through 2.5.3...

5.8CVSS6AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/17 8:12 a.m.•18 views

CVE-2024-32547 WordPress Code Insert Manager (Q2W3 Inc Manager) plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond Code Insert Manager Q2W3 Inc Manager allows Reflected XSS.This issue affects Code Insert Manager Q2W3 Inc Manager: from n/a through 2.5.3...

5.8CVSS7.1AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/17 8:12 a.m.•88 views

CVE-2024-32547

CVE-2024-32547 is a Reflected XSS in the Code Insert Manager (Q2W3 Inc Manager) WordPress plugin. Affected: Code Insert Manager versions n/a through 2.5.3. Root cause: improper neutralization during web page generation. Impact per sources: potential for injection via input; CVSSv3.1 v3.1 metrics ...

5.8CVSS5.2AI score0.00288EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/15 12:00 a.m.•19 views

WordPress Code Insert Manager (Q2W3 Inc Manager) Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Code Insert Manager Q2W3 Inc Manager Type Plugin Vulnerable versions = 2.5.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32547 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID c408b8a3e4fc Credits Dimas Maulana...

5.8CVSS6.5AI score0.00288EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2023/12/04 12:00 a.m.•44 views

SUSE: Security Advisory (SUSE-SU-2023:4634-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.89855EPSS
SaveExploits39References28
Circl
Circl
•added 2023/08/11 7:26 a.m.•16 views

CVE-2023-32547

creationtimestamp| type| source ---|---|--- 2023-08-11 07:26:36+00:00| seen| https://t.me/cibsecurity/68281...

7.8CVSS7.5AI score0.00137EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/11 3:15 a.m.•13 views

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/11 2:37 a.m.•16 views

CVE-2023-32547

Incorrect default permissions in the MAVinci Desktop Software for IntelR Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.2AI score0.00137EPSS
SaveExploits0References1
Rows per page
Query Builder