Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31209

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00221EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/09/27 3:47 a.m.3 views

CVE-2025-10745

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.9AI score0.00221EPSS
Exploits0References1
NVD
NVD
added 2025/09/26 4:15 a.m.1 views

CVE-2025-10745

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS0.00221EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/09/26 3:25 a.m.1 views

CVE-2025-10745 Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS5.5AI score0.00221EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/09/26 3:25 a.m.4 views

CVE-2025-10745 Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS0.00221EPSS
Exploits0References5
CVE
CVE
added 2025/09/26 3:25 a.m.14 views

CVE-2025-10745

CVE-2025-10745 affects Banhammer – Monitor Site Traffic, Block Bad Users and Bots (WordPress) up to version 3.4.8. Root cause: a deterministically generated secret key (using md5 and base64_encode) stored in banhammer_secret_key enables unauthenticated bypass by appending a GET parameter banhamme...

5.3CVSS5.5AI score0.00221EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.1 views

PT-2025-39487

Name of the Vulnerable Software and Affected Versions Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress versions through 3.4.8 Description The Banhammer plugin for WordPress is susceptible to a blocking bypass. This occurs because a site-wide “secret key” is...

5.3CVSS6.2AI score0.00221EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.1 views

WordPress plugin Banhammer 安全特征问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00221EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/09/25 11:39 p.m.2 views

WordPress Banhammer plugin <= 3.4.8 - Unauthenticated Protection Mechanism Bypass vulnerability

Unauthenticated Protection Mechanism Bypass vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Banhammer versions = 3.4.8...

5.3CVSS6.8AI score0.00221EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/20 12:0 a.m.1 views

PT-2022-25509 · Unknown · Banhammer Plugin

Name of the Vulnerable Software and Affected Versions: Banhammer Plugin affected versions not specified Description: A vulnerability has been found in the Banhammer Plugin, affecting the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to improper output...

6.3AI score
Exploits0References3
Rows per page
Query Builder