Lucene search
+L

138 matches found

NVD
NVD
•added 2023/11/09 11:15 p.m.•30 views

CVE-2023-31088

Cross-Site Request Forgery CSRF vulnerability in Faraz Quazi Floating Action Button plugin = 1.2.1 versions...

8.8CVSS0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/08 3:12 p.m.•51 views

CVE-2023-46613 WordPress Add to Calendar Button Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jens Kuerschner Add to Calendar Button plugin = 1.5.1 versions...

6.5CVSS5.4AI score0.00409EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/08 3:12 p.m.•71 views

CVE-2023-46613

The CVE-2023-46613 entry concerns the WordPress plugin Jens Kuerschner Add to Calendar Button (versions

6.5CVSS5.2AI score0.00409EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/10/16 12:15 p.m.•24 views

CVE-2023-44987

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Timely - Appointment software Timely Booking Button plugin = 2.0.2 versions...

5.9CVSS5.4AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/03 1:15 p.m.•21 views

CVE-2023-40199

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

8.8CVSS6.5AI score0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/03 12:33 p.m.•16 views

CVE-2023-40199 WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

5.4CVSS7.1AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/03 12:33 p.m.•70 views

CVE-2023-40199

CVE-2023-40199 describes a Cross-Site Request Forgery (CSRF) vulnerability in the CRUDLab WP Like Button plugin for WordPress, affecting versions

8.8CVSS7.1AI score0.00252EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/03 12:33 p.m.•32 views

CVE-2023-40199 WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

5.4CVSS9AI score0.00252EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/02 8:15 a.m.•28 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in YYDevelopment Back To The Top Button plugin = 2.1.5 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/08/16 12:15 p.m.•14 views

CVE-2023-2254

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...

4.8CVSS6.6AI score0.00442EPSS
SaveExploits2References1
NVD
NVD
•added 2023/08/10 11:15 a.m.•40 views

CVE-2023-23871

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Webdzier Button plugin = 1.1.23 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/10 11:15 a.m.•25 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Webdzier Button plugin = 1.1.23 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/10 10:35 a.m.•19 views

CVE-2023-23871 WordPress Button Plugin <= 1.1.23 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Webdzier Button plugin = 1.1.23 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/10 10:35 a.m.•64 views

CVE-2023-23871

CVE-2023-23871 affects the WordPress Button (Webdzier Button) plugin

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/10 10:35 a.m.•40 views

CVE-2023-23871 WordPress Button Plugin <= 1.1.23 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Webdzier Button plugin = 1.1.23 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/08 12:55 p.m.•39 views

CVE-2023-32292 WordPress Chat Button Plugin <= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GetButton Chat Button by GetButton.Io plugin = 1.8.9.4 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/08 12:55 p.m.•18 views

CVE-2023-32292 WordPress Chat Button Plugin <= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GetButton Chat Button by GetButton.Io plugin = 1.8.9.4 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/25 2:15 p.m.•53 views

CVE-2023-36503

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin = 9.5.3 versions...

6.5CVSS6AI score0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/25 1:50 p.m.•113 views

CVE-2023-36503

CVE-2023-36503 affects the WordPress plugin MaxButtons (MaxFoundry) for versions

6.5CVSS5.7AI score0.00383EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/07/17 12:00 a.m.•20 views

WordPress Chat Button Plugin <= 1.8.9.4 is vulnerable to Cross Site Scripting (XSS)

Software Chat Button Type Plugin Vulnerable versions = 1.8.9.4 Fixed in 1.8.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32292 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9c87f016ddc7 Credits Jayasuryapal G Required...

5.9CVSS5.7AI score0.00369EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder