Lucene search
+L

65 matches found

Patchstack
Patchstack
•added 2026/01/30 2:26 a.m.•15 views

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

7.1CVSS5.9AI score0.0025EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2026/01/30 2:26 a.m.•19 views

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

7.1CVSS5.9AI score0.0025EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2026/01/30 2:25 a.m.•17 views

WordPress Business Card plugin <= 1.0.0 - Arbitrary Card Deletion via CSRF vulnerability

Arbitrary Card Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

6.4CVSS5.9AI score0.00276EPSS
SaveExploits2References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2006-5800

Malware in sbrugna...

7.5CVSS6.4AI score0.01426EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-5408

Malicious code in bioql PyPI...

6.5CVSS9.2AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:27 a.m.•14 views

CVE-2024-5807

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations...

7.2CVSS7.3AI score0.00645EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/27 2:34 p.m.•10 views

CVE-2025-26952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS7.2AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/25 3:15 p.m.•10 views

CVE-2025-26952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/25 2:17 p.m.•78 views

CVE-2025-26952

CVE-2025-26952 is a Stored XSS in the WordPress plugin Business Card Block (versions

6.5CVSS7.2AI score0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/25 2:17 p.m.•27 views

CVE-2025-26952 WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/25 2:17 p.m.•13 views

CVE-2025-26952 WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS8.6AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/25 12:00 a.m.•14 views

WordPress plugin Business Card Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS8.2AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•2 views

CVE-2025-26952: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/23 2:26 p.m.•17 views

WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Logan Cote Patchstack Alliance in WordPress Plugin Business Card Block versions = 1.0.5...

6.5CVSS6.1AI score0.00256EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/30 6:37 a.m.•20 views

WordPress Business Card plugin <= 1.0.0 - Admin+ File Upload vulnerability

Admin+ File Upload vulnerability discovered by Anjo Rev Tingson in WordPress Plugin Business Card versions = 1.0.0...

7.2CVSS7AI score0.00645EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/07/30 6:15 a.m.•13 views

CVE-2024-5807

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations...

7.2CVSS6AI score0.00645EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/30 6:00 a.m.•79 views

CVE-2024-5807

The Business Card WordPress plugin (versions

7.2CVSS6.9AI score0.00645EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/30 6:00 a.m.•24 views

CVE-2024-5807 Business Card <= 1.0.0 - Admin+ File Upload

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations...

7.3AI score0.00645EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/30 6:00 a.m.•47 views

CVE-2024-5807 Business Card <= 1.0.0 - Admin+ File Upload

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations...

0.00645EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•3 views

CVE-2024-5807: Undefined Security Weakness

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations...

7.2CVSS6.1AI score0.00645EPSS
SaveExploits1References1
Rows per page
Query Builder