Lucene search
+L

330 matches found

CVE
CVE
•added 2023/11/09 7:22 p.m.•70 views

CVE-2023-34171

CVE-2023-34171 = Cross-Site Request Forgery (CSRF) in the WordPress plugin “WP Report Post” by Alex Raven. Affected: WP Report Post plugin versions ≤ 2.1.2. Public records in the CVE describe a CSRF vulnerability, with NVD metrics listing CVSS v3.1 base score 8.8 (HIGH), attack vector Network, at...

8.8CVSS8.9AI score0.00301EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/09 7:22 p.m.•50 views

CVE-2023-34171 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

5.4CVSS9AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/09 4:15 p.m.•19 views

CVE-2023-25994

Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...

8.8CVSS0.00303EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/09 4:15 p.m.•26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...

6.8CVSS7.5AI score0.00303EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/09 3:48 p.m.•49 views

CVE-2023-25994

CVE-2023-25994 is a CSRF vulnerability in the WordPress Publish to Schedule plugin (versions

8.8CVSS8.8AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/09 3:48 p.m.•34 views

CVE-2023-25994 WordPress Publish to Schedule Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...

5.4CVSS8.9AI score0.00303EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•1 views

CVE-2023-34171: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

8.8CVSS7.8AI score0.00301EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•0 views

CVE-2023-25994: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alex Benfica Publish to Schedule plugin = 4.4.2 versions...

8.8CVSS7.9AI score0.00303EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/11/07 12:00 a.m.•30 views

WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Arbitrary File Deletion

Software Awesome Support Type Plugin Vulnerable versions 6.1.5 Fixed in 6.1.5 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-5355 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID b2eca27b2e54 Credits Alex Sanford Require...

8.1CVSS6.8AI score0.0066EPSS
SaveExploits2References4Affected Software1
Openbugbounty
Openbugbounty
•added 2023/10/26 5:18 p.m.•9 views

alex-uhrig.de Improper Access Control vulnerability OBB-3765938

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
SaveExploits0
OSV
OSV
•added 2023/10/25 6:17 p.m.•13 views

CVE-2023-45769

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

6.1CVSS5.8AI score0.00454EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•31 views

CVE-2023-45769

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

7.1CVSS6.2AI score0.00454EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•18 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

5.8CVSS6AI score0.00454EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
•added 2023/10/25 5:17 p.m.•12 views

alex-it-systems.de Improper Access Control vulnerability OBB-3765367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
SaveExploits0
Cvelist
Cvelist
•added 2023/10/24 12:08 p.m.•36 views

CVE-2023-45769 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

7.1CVSS6.3AI score0.00454EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/24 12:08 p.m.•66 views

CVE-2023-45769

CVE-2023-45769 affects WordPress WP Report Post plugin

7.1CVSS6AI score0.00454EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/24 12:00 a.m.•1 views

CVE-2023-45769: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alex Raven WP Report Post plugin = 2.1.2 versions...

7.1CVSS6.4AI score0.00454EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/17 11:15 a.m.•15 views

CVE-2023-45010

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alex MacArthur Complete Open Graph plugin = 3.4.5 versions...

4.8CVSS7.3AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/17 10:55 a.m.•76 views

CVE-2023-45010

CVE-2023-45010 – WordPress Complete Open Graph Plugin ≤ 3.4.5 is vulnerable to admin+ Stored XSS. Root cause: insufficient input validation/escaping in plugin parameters, enabling stored XSS. Multiple connected sources (NVD, Red Hat, WP/distro feeds) confirm the vulnerability and affected version...

5.9CVSS5.1AI score0.00316EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•1 views

CVE-2023-45010: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alex MacArthur Complete Open Graph plugin = 3.4.5 versions...

5.9CVSS5.6AI score0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder