Lucene search
+L

75 matches found

Vulnrichment
Vulnrichment
added 2023/12/18 10:13 p.m.15 views

CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...

4.3CVSS7AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/18 10:13 p.m.212 views

CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8...

4.3CVSS8.9AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/18 12:0 a.m.8 views

WordPress Plugin Button Generator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00294EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/18 12:0 a.m.7 views

PT-2023-31074 · Unknown · Button Generator

Name of the Vulnerable Software and Affected Versions: Button Generator – easily Button Builder versions n/a through 2.3.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

8.8CVSS8.8AI score0.00294EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
added 2023/12/08 12:0 a.m.18 views

Button Generator – easily Button Builder < 2.3.9 - Missing Authorization

Description The Button Generator – easily Button Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function btgcount function in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to res...

9.2AI score0.00614EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/12/08 12:0 a.m.16 views

Button Generator – easily Button Builder < 2.3.9 - Cross-Site Request Forgery

Description The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.8. This is due to missing nonce validation on the btgcount function. This makes it possible for unauthenticated attackers to reset the...

8.8CVSS8.7AI score0.00294EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/11/28 12:0 a.m.27 views

WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Button Generator – easily Button Builder Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-49155 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f69c6cdb268...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/11/28 12:0 a.m.17 views

WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Broken Access Control

Software Button Generator – easily Button Builder Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49154 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 0051a12ba9e7 Credits Elli...

6.6AI score0.00614EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/07/11 1:15 p.m.33 views

CVE-2023-25443

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

6.5CVSS5.2AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/11 1:15 p.m.12 views

CVE-2023-25443

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 1:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS6.6AI score0.0022EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/11 12:29 p.m.54 views

CVE-2023-25443

CVE-2023-25443 is a CSRF vulnerability in the WordPress Button Generator – easily Button Builder plugin, affecting versions

6.5CVSS5.5AI score0.0022EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/11 12:29 p.m.35 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS6.8AI score0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/11 12:29 p.m.21 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS7.1AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.9 views

WordPress Plugin Button Generator – easily Button Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Button Generator - easily...

6.5CVSS7AI score0.0022EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/22 12:15 p.m.6 views

CVE-2023-27452

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/22 12:15 p.m.27 views

CVE-2023-27452

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 11:59 a.m.44 views

CVE-2023-27452

CVE-2023-27452 concerns the WordPress plugin Button Generator – easily Button Builder (Wow-Company) v2.3.3 and earlier, with an authenticated (admin+) Stored XSS vulnerability. Public details from NVD/Red Hat/Patchstack/patch entries identify the affected component and root cause as Stored XSS in...

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/22 11:59 a.m.8 views

CVE-2023-27452 WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/22 11:59 a.m.32 views

CVE-2023-27452 WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.3 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder