Lucene search
K

17 matches found

CNVD
CNVD
added 2025/11/25 12:0 a.m.1 views

WordPress AuthorSure plugin cross-site request forgery vulnerability

WordPress AuthorSure plugin is an open source plugin designed for the WordPress platform, mainly used to manage the submission process of multi-author sites. WordPress AuthorSure plugin has a cross-site request forgery vulnerability, the vulnerability stems from the lack of random number validati...

6.1CVSS6.8AI score0.00012EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/22 8:35 a.m.1 views

CVE-2025-13134

The AuthorSure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the 'authorsure' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

6.1CVSS5.4AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/21 9:30 a.m.1 views

EUVD-2025-198402

The AuthorSure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the 'authorsure' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

6.1CVSS5AI score0.00012EPSS
Exploits0References3
NVD
NVD
added 2025/11/21 8:15 a.m.3 views

CVE-2025-13134

The AuthorSure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the 'authorsure' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

6.1CVSS0.00012EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/21 7:31 a.m.3 views

CVE-2025-13134 AuthorSure <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The AuthorSure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the 'authorsure' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

6.1CVSS0.00012EPSS
Exploits0References2
CVE
CVE
added 2025/11/21 7:31 a.m.10 views

CVE-2025-13134

CVE-2025-13134: WordPress AuthorSure plugin (versions

6.1CVSS5AI score0.00012EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/21 7:31 a.m.1 views

CVE-2025-13134 AuthorSure <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The AuthorSure plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the 'authorsure' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

6.1CVSS5AI score0.00012EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.1 views

WordPress plugin AuthorSure 跨站请求伪造漏洞

WordPress AuthorSure plugin is an open source plugin designed for the WordPress platform, mainly used to manage the submission process of multi-author sites. WordPress AuthorSure plugin has a cross-site request forgery vulnerability, the vulnerability stems from the lack of random number validati...

6.1CVSS6.8AI score0.00012EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30669

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.0003EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.2 views

CVE-2025-57979

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson AuthorSure authorsure allows Stored XSS.This issue affects AuthorSure: from n/a through = 2.3...

5.9CVSS5.9AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2025/09/22 7:15 p.m.1 views

CVE-2025-57979

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson AuthorSure authorsure allows Stored XSS.This issue affects AuthorSure: from n/a through = 2.3...

5.9CVSS0.0003EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 7:3 p.m.2 views

WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin AuthorSure versions = 2.3...

5.9CVSS6AI score0.0003EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.7 views

CVE-2025-57979 WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson AuthorSure authorsure allows Stored XSS.This issue affects AuthorSure: from n/a through = 2.3...

5.9CVSS0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:24 p.m.6 views

CVE-2025-57979

CVE-2025-57979 is described as a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin AuthorSure, affecting versions from n/a up to 2.3. The description specifies improper input neutralization during web page generation, enabling stored XSS. The CVSS v3.1 base metrics are provi...

5.9CVSS5.9AI score0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.1 views

CVE-2025-57979 WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson AuthorSure authorsure allows Stored XSS.This issue affects AuthorSure: from n/a through = 2.3...

5.9CVSS5.2AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.1 views

PT-2025-38829

Name of the Vulnerable Software and Affected Versions Russell Jamieson AuthorSure versions prior to 2.3 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be...

5.9CVSS6.4AI score0.0003EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin AuthorSure 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.8AI score0.0003EPSS
Exploits0References1
Rows per page
Query Builder