Lucene search
+L

1562 matches found

Vulnrichment
Vulnrichment
•added 2025/08/16 3:38 a.m.•5 views

CVE-2025-7684 Last.fm Recent Album Artwork <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfmalbumsartwork.php' page. This makes it possible for unauthenticated attackers to update...

6.1CVSS6.7AI score0.0017EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/16 3:38 a.m.•25 views

CVE-2025-7684 Last.fm Recent Album Artwork <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfmalbumsartwork.php' page. This makes it possible for unauthenticated attackers to update...

6.1CVSS0.0017EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•10 views

WordPress plugin Last.fm Recent Album Artwork 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Last.fm Recent...

6.1CVSS6.6AI score0.0017EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/16 12:00 a.m.•0 views

CVE-2025-7684: Cross-Site Request Forgery (CSRF)

The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfmalbumsartwork.php' page. This makes it possible for unauthenticated attackers to update...

6.1CVSS5.5AI score0.0017EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/15 11:35 p.m.•12 views

WordPress Last.fm Recent Album Artwork plugin <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Last.fm Recent Album Artwork versions = 1.0.2...

6.1CVSS5.7AI score0.0017EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp (npm)

The package zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•12 views

Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)

The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf (npm)

The package a-lbum-do-wnload-avai-lable-file-467383-bronco-nxky8-uhnoxf was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•12 views

Malicious code in zip-mp3-a-lbum-do-wnload-new-82651-raskit-dbljd-cwdxrm (npm)

The package zip-mp3-a-lbum-do-wnload-new-82651-raskit-dbljd-cwdxrm was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm)

The package zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-41005 Malicious code in zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl (npm)

The package zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•5 views

MAL-2025-15141 Malicious code in avail-able-albu-m-down-load-2014-21052-the-inevitable-end-box51-pznqrt (npm)

The package avail-able-albu-m-down-load-2014-21052-the-inevitable-end-box51-pznqrt was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-13906 Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)

The package a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-41009 Malicious code in zip-mp3-a-lbum-do-wnload-new-482338-deceivers-0nx6u-qtwkft (npm)

The package zip-mp3-a-lbum-do-wnload-new-482338-deceivers-0nx6u-qtwkft was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-13917 Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•4 views

MAL-2025-35791 Malicious code in test-mlw2-mixer-album (npm)

The package test-mlw2-mixer-album was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-35636 Malicious code in test-mlw2-kreng-album-tonal-cries (npm)

The package test-mlw2-kreng-album-tonal-cries was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-13907 Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)

The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•4 views

MAL-2025-27348 Malicious code in new-al-bum-av-ailable-37081-the-hard-way-ic2mb-rquzyw (npm)

The package new-al-bum-av-ailable-37081-the-hard-way-ic2mb-rquzyw was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-41013 Malicious code in zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww (npm)

The package zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder