Lucene search
+L

61 matches found

Nuclei
Nuclei
added 2026/08/29 10:07 a.m.194 views

WP Fastest Cache 1.2.2 - SQL Injection

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2023-6063 info: name: WP Fastest Cache 1.2.2 - SQL Injection author: DhiyaneshDK...

7.5CVSS7.2AI score0.73708EPSS
SaveExploits11References5
Kitploit
Kitploit
added 2026/08/25 7:44 a.m.2 views

CVE-2023-6063-PoC

CVE-2023-6063-PoC Ausnutzung einer SQL-Injection-Schwachstelle in WP Fastest Cache CVE-2023-6063...

7.5CVSS7.6AI score0.73708EPSS
SaveExploits11
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-6063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain...

4.3CVSS5.7AI score0.0019EPSS
SaveExploits0References2
Circl
Circl
added 2026/05/14 6:00 p.m.15 views

CVE-2026-6063

creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260515...

4.3CVSS5.7AI score0.0019EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/05/14 5:34 a.m.19 views

CVE-2026-6063

Removed by vendor...

4.3CVSS5.8AI score0.0019EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/05/14 5:34 a.m.9 views

CVE-2026-6063 Authorization Bypass Through User-Controlled Key in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user with developer-role permissions to remove code owner approval rules from merge request...

4.3CVSS5.9AI score0.0019EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/11/27 12:00 a.m.7 views

Debian: Security Advisory (DSA-6063-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS6.8AI score0.00196EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/14 8:23 a.m.28 views

CVE-2025-6063 XiSearch bar <= 2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The XiSearch bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6. This is due to missing or incorrect nonce validation on the 'xisearch-key-config' page. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS0.00117EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/14 8:23 a.m.81 views

CVE-2025-6063

The CVE CVE-2025-6063 affects the XiSearch bar WordPress plugin (versions up to and including 2.6). The root cause is missing/incorrect nonce validation on the xisearch-key-config page, enabling Cross-Site Request Forgery. This allows unauthenticated attackers to update plugin settings and inject...

6.1CVSS5.9AI score0.00117EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/06/14 6:18 a.m.12 views

WordPress XiSearch bar plugin <= 2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin XiSearch bar versions = 2.6...

6.1CVSS5.8AI score0.00117EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 8:02 a.m.10 views

CVE-2024-6063

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...

5.5CVSS6.8AI score0.00328EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/04/10 3:56 p.m.191 views

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

PoC for CVE-2023-6063: WP Fastest Cache 1.2.2 Unauthenticated...

7.5CVSS8.4AI score0.73708EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2025/04/10 3:56 p.m.173 views

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

PoC for CVE-2023-6063: WP Fastest Cache 1.2.2 Unauthenticated...

7.5CVSS8.4AI score0.73708EPSS
SaveExploits11
zdt
zdt
added 2024/02/28 12:00 a.m.380 views

WordPress WP Fastest Cache 1.2.2 SQL Injection Vulnerability

WordPress WP Fastest Cache plugin version 1.2.2 suffers from an unauthenticated remote SQL injection vulnerability. Exploit Title: Unauthenticated SQL Injection in WP Fastest Cache 1.2.2 Exploit Author: Meryem Taşkın Vendor Homepage: https://www.wpfastestcache.com/ Software Link:...

7.5CVSS8.7AI score0.73708EPSS
SaveExploits11
Packet Storm
Packet Storm
added 2024/02/28 12:00 a.m.313 views

WordPress WP Fastest Cache 1.2.2 SQL Injection

Exploit Title: Unauthenticated SQL Injection in WP Fastest Cache 1.2.2 Date: 14.11.2023 Exploit Author: Meryem Taşkın Vendor Homepage: https://www.wpfastestcache.com/ Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Version: WP Fastest Cache 1.2.2 Tested on: WP Fastest Cache 1.2.2...

7.5CVSS7.4AI score0.73708EPSS
SaveExploits11
OSV
OSV
added 2023/12/04 10:15 p.m.3 views

CVE-2023-6063

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

7.5CVSS5.8AI score0.73708EPSS
SaveExploits11References2
CVE
CVE
added 2023/12/04 9:29 p.m.162 views

CVE-2023-6063

CVE-2023-6063 affects WP Fastest Cache WordPress plugin versions ≤ 1.2.2. The vulnerability is an unauthenticated SQL injection caused by improper sanitization/escaping of parameters in SQL statements, exploitable via the wordpress_logged_in cookie. Impact reported in sources includes potential e...

7.5CVSS7.9AI score0.73708EPSS
SaveExploits11References2Affected Software1
GithubExploit
GithubExploit
added 2023/11/16 5:41 p.m.116 views

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

CVE-2023-6063 PoC Reference - Unauthenticated SQL Inject...

7.5CVSS8.1AI score0.73708EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2023/11/15 2:53 p.m.118 views

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

CVE-2023-6063 PoC Reference - Unauthenticated SQL Inject...

7.5CVSS8.1AI score0.73708EPSS
SaveExploits11
Circl
Circl
added 2023/11/15 12:43 p.m.34 views

CVE-2023-6063

creationtimestamp| type| source ---|---|--- 2023-11-15 12:43:59+00:00| published-proof-of-concept| https://t.me/itsecnews/3681 2023-11-15 15:20:06+00:00| published-proof-of-concept| https://t.me/truesecator/5087 2023-11-16 09:18:29+00:00| published-proof-of-concept| https://t.me/hackyourmom/5973...

7.5CVSS7.7AI score0.73708EPSS
SaveExploits11References14
Rows per page
Query Builder