Lucene search
+L

854 matches found

Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.7 views

PT-2025-39554

Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Playlist versions through 3.8 Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This allows for Blind SQ...

8.5CVSS7.2AI score0.00261EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/09/24 6:31 p.m.8 views

CVE-2025-58650

Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 7:16 p.m.9 views

CVE-2025-58649

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...

4.3CVSS0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.19 views

CVE-2025-58649

CVE-2025-58649 affects the All in One SEO Pack WordPress plugin, up to version 4.8.7.1. Description indicates an Insertion of Sensitive Information Into Sent Data vulnerability enabling retrieval of embedded sensitive data. The connected docs show this entry as a mitigated/patched issue (patched ...

4.3CVSS5.9AI score0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.19 views

CVE-2025-58649 WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...

4.3CVSS0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.6 views

CVE-2025-58649 WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...

4.3CVSS5.9AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.23 views

CVE-2025-58650

CVE-2025-58650 is a Missing Authorization vulnerability in All In One SEO Pack for WordPress. Connected source shows affected software as All In One SEO Pack via versions up to 4.8.7, with a CVSS v3.1 base score of 5.4 (Network, Low attack complexity, Privileges required: Low, User interaction: N...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.21 views

CVE-2025-58650 WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...

5.4CVSS0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin All In One SEO Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

4.3CVSS6.3AI score0.00273EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin All In One SEO Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.11 views

PT-2025-38939

Name of the Vulnerable Software and Affected Versions Syed Balkhi All In One SEO Pack versions through 4.8.7 Description An authorization issue exists in Syed Balkhi All In One SEO Pack, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update All...

5.4CVSS6.6AI score0.00266EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/09/11 2:26 a.m.16 views

WordPress All in one Minifier plugin <= 3.2 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by p0cket in WordPress Plugin All in one Minifier versions = 3.2...

7.5CVSS7.8AI score0.00429EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/11 12:00 a.m.16 views

WordPress plugin All in one Minifier SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

7.5CVSS7.6AI score0.00429EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 2:32 p.m.11 views

CVE-2025-58829

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

4.9CVSS5.9AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/05 2:15 p.m.9 views

CVE-2025-58829

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

4.9CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 1:45 p.m.29 views

CVE-2025-58829

CVE-2025-58829 affects WordPress plugin Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One, with SSRF in versions n/a up to 2.2.6. Root cause is SSRF exposure within the plugin’s handling of external requests. Public references indicate the vulnerability remains unpatched ...

4.9CVSS5.9AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 1:45 p.m.19 views

CVE-2025-58829 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

4.9CVSS0.0018EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 1:45 p.m.4 views

CVE-2025-58829 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

4.9CVSS5.9AI score0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:00 a.m.16 views

PT-2025-36168

Name of the Vulnerable Software and Affected Versions: aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One versions n/a through 2.2.6 Description: A Server-Side Request Forgery SSRF vulnerability exists in aitool Ai Auto Tool Content Writing Assistant Gemini Writer,...

4.9CVSS6.4AI score0.0018EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/27 12:00 a.m.8 views

WordPress plugin All-in-One WP Migration and Backup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.4CVSS5.7AI score0.0019EPSS
SaveExploits0References3
Rows per page
Query Builder