Lucene search
+L

7468 matches found

CNNVD
CNNVD
added 2023/11/06 12:00 a.m.9 views

WordPress Plugin WooCommerce Ninja Forms Product Add-ons Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS7.4AI score0.00877EPSS
SaveExploits2References2
GithubExploit
GithubExploit
added 2023/11/05 6:02 p.m.726 views

Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor...

9.8CVSS9.7AI score0.81695EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2023/11/02 3:15 a.m.510 views

Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons

🚀 WordPress Royal Elementor Addons and Templates Exploit Expl...

9.8CVSS9.8AI score0.81695EPSS
SaveExploits18
OSV
OSV
added 2023/10/31 2:15 p.m.2 views

CVE-2023-5360

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE...

9.8CVSS5.9AI score0.81695EPSS
SaveExploits18References2
ATTACKERKB
ATTACKERKB
added 2023/10/31 12:00 a.m.205 views

CVE-2023-5360

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Recent assessments: jheysel-r7 at November 29, 2023 9:40pm UTC reported: The Royal...

9.8CVSS9.7AI score0.81695EPSS
SaveIn wildExploits18References3
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.14 views

WordPress Plugin Royal Elementor Addons and Templates Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS7.7AI score0.81695EPSS
SaveExploits18References5
OSV
OSV
added 2023/10/27 9:15 p.m.7 views

CVE-2023-46211

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

5.4CVSS6.7AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/27 8:22 p.m.17 views

CVE-2023-46211 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin = 3.19.14 versions...

6.5CVSS5.8AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/27 8:22 p.m.78 views

CVE-2023-46211

CVE-2023-46211 is a stored Cross-Site Scripting (XSS) vulnerability in the Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin, affected versions

6.5CVSS5.5AI score0.0031EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/27 12:00 a.m.5 views

WordPress plugin Ultimate Addons for WPBakery Page Builder Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.0031EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:00 a.m.29 views

The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system allows a hacker to execute arbitrary code by loading a specially created file.

The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by downloading ...

10CVSS8.2AI score0.81695EPSS
SaveExploits18References6Affected Software1
Patchstack
Patchstack
added 2023/10/19 12:00 a.m.15 views

WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Addons for WPBakery Page Builder Type Plugin Vulnerable versions = 3.19.14 Fixed in 3.19.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46211 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID e15e4a96621e...

6.5CVSS5.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/10/11 12:00 a.m.20 views

WordPress The Royal Elementor Addons Plugin < 1.3.76 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:royal-elementor-addons:royalelementoraddons"; if description...

8.8CVSS7AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/06 1:15 p.m.11 views

CVE-2022-47175

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/06 1:15 p.m.31 views

CVE-2022-47175

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/06 1:15 p.m.27 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

6.8CVSS8.7AI score0.00253EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/06 12:45 p.m.87 views

CVE-2022-47175

CVE-2022-47175 affects the WordPress plugin “Royal Elementor Addons and Templates” up to version 1.3.75. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability. PatchStack and related sources indicate the issue can be exploited without authentication, with CVSS v3.1 data showing impa...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/06 12:45 p.m.29 views

CVE-2022-47175 WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in P Royal Royal Elementor Addons and Templates plugin = 1.3.75 versions...

4.3CVSS9.1AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/06 12:00 a.m.19 views

PT-2023-15218 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: P Royal Royal Elementor Addons and Templates plugin versions 1.3.75 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performin...

8.8CVSS7.6AI score0.00253EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/10/06 12:00 a.m.9 views

WordPress Plugin Royal Elementor Addons and Templates Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder