Lucene search
+L

1047 matches found

NVD
NVD
•added 2025/04/04 4:15 p.m.•19 views

CVE-2025-32266

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•32 views

CVE-2025-32266 WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS0.00188EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•11 views

CVE-2025-32266 WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images allows Cross Site Request Forgery. This issue affects 404 Image Redirection Replace Broken Images: from n/a through 1.4...

4.3CVSS7.2AI score0.00188EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/04 1:40 p.m.•14 views

WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin 404 Image Redirection Replace Broken Images versions = 1.4...

4.3CVSS8.2AI score0.00188EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•16 views

WordPress plugin 404 Image Redirection (Replace Broken Images) 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS6AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•2 views

CVE-2025-32266: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•16 views

PT-2025-15020 · Unknown · 404 Image Redirection

Name of the Vulnerable Software and Affected Versions: 404 Image Redirection Replace Broken Images versions n/a through 1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user in...

4.3CVSS5.5AI score0.00188EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/21 12:00 a.m.•2 views

CVE-2025-0726: Incomplete Cleanup

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users ca...

7.5CVSS7.7AI score0.00755EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:05 a.m.•19 views

CVE-2022-47605

Auth. SQL Injection' vulnerability in Kunal Nagar Custom 404 Pro plugin = 3.7.0 versions...

8.3CVSS7.4AI score0.00668EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 6:52 a.m.•16 views

CVE-2024-32559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post allows Reflected XSS.This issue affects WP 404 Auto Redirect to Similar Post: from n/a through 1.0.4...

7.1CVSS5.2AI score0.00394EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:47 a.m.•13 views

CVE-2024-27917

Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session Cookie and assigns it to the Response. Since Shopware 6.5.8.0, the 404 pages are cached to improve the performance of 404 pages. So the cached Response which contains a Session...

7.5CVSS7AI score0.00611EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:17 p.m.•13 views

CVE-2024-39646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kunal Custom 404 Pro custom-404-pro.This issue affects Custom 404 Pro: from n/a through = 3.11.1...

7.1CVSS5.9AI score0.00624EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/29 4:11 a.m.•7 views

Malicious code in all-dl-404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/29 4:11 a.m.•11 views

MAL-2024-11129 Malicious code in all-dl-404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/20 7:15 a.m.•18 views

CVE-2024-11277

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

6.1CVSS7.4AI score0.00318EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/20 6:42 a.m.•63 views

CVE-2024-11277

CVE-2024-11277 (404 Solution, WordPress) : The plugin is affected by a reflected Cross-Site Scripting (XSS) vulnerability via URLs in all versions up to 2.35.19. Exploitation requires a user to click a link, but does not require authentication. Root cause is insufficient input sanitization and ou...

6.1CVSS6.4AI score0.00318EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/20 6:42 a.m.•12 views

CVE-2024-11277 404 Solution <= 2.35.19 - Reflected Cross-Site Scripting

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

6.1CVSS6.4AI score0.00318EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/20 6:42 a.m.•29 views

CVE-2024-11277 404 Solution <= 2.35.19 - Reflected Cross-Site Scripting

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

6.1CVSS0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•5 views

CVE-2024-11277: Improper Neutralization of Input During Web Page Generation

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

6.1CVSS6.5AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•14 views

WordPress plugin 404 Solution 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6.3AI score0.00318EPSS
SaveExploits0References2
Rows per page
Query Builder