Lucene search
+L

1119 matches found

Cvelist
Cvelist
•added 2025/01/07 4:55 p.m.•37 views

CVE-2025-22319 WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media Share Buttons | MashShare: from n/a through 4.0.47...

4.3CVSS0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•167 views

PT-2025-4434 · Unknown · Social Media Share Buttons | Mashshare

Name of the Vulnerable Software and Affected Versions: Social Media Share Buttons | MashShare versions n/a through 4.0.47 Description: The issue is related to a Missing Authorization vulnerability in Social Media Share Buttons | MashShare. This vulnerability affects the authorization process,...

4.3CVSS9.2AI score0.00347EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•3 views

CVE-2025-22319: Missing Authorization

Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media Share Buttons | MashShare: from n/a through 4.0.47...

4.3CVSS5.8AI score0.00347EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/02 12:15 p.m.•36 views

CVE-2024-56238

Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through = 0.9.1...

5.3CVSS0.00473EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/02 12:01 p.m.•56 views

CVE-2024-56238

CVE-2024-56238 describes a Missing Authorization vulnerability in the Floating Action Buttons plugin, allowing access to functionality not constrained by ACLs. Affected software: Floating Action Buttons (0.9.1 and earlier). The connected Red Hat and other entries corroborate the same CVEID and de...

5.3CVSS7.2AI score0.00473EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 12:01 p.m.•10 views

CVE-2024-56238 WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through = 0.9.1...

5.3CVSS8.6AI score0.00473EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•3 views

CVE-2024-56238: Missing Authorization

Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through = 0.9.1...

5.3CVSS5.8AI score0.00473EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•17 views

WordPress plugin Floating Action Buttons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS8.3AI score0.00473EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•16 views

PT-2025-3204 · Unknown · Qunatumcloud Floating Action Buttons

Name of the Vulnerable Software and Affected Versions: QunatumCloud Floating Action Buttons versions 0.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For QunatumClo...

5.3CVSS9.4AI score0.00473EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/01 12:15 a.m.•25 views

CVE-2024-56020

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through = 1.3.0...

6.5CVSS0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/01 12:00 a.m.•19 views

WordPress plugin SvegliaT Buttons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/31 11:09 p.m.•96 views

CVE-2024-56020

CVE-2024-56020 (SvegliaT Buttons) is a stored XSS vulnerability in SvegliaT Buttons (Mario Di Pasquale) affecting versions up to 1.3.0. The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) and is labeled as an authenticated (Contributor+) vulnerability. The ...

6.5CVSS7.2AI score0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/31 11:09 p.m.•36 views

CVE-2024-56020 WordPress SvegliaT Buttons Plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through = 1.3.0...

6.5CVSS0.00243EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/31 11:09 p.m.•12 views

CVE-2024-56020 WordPress SvegliaT Buttons Plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through = 1.3.0...

6.5CVSS7.2AI score0.00243EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•2 views

CVE-2024-56020: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a through = 1.3.0...

6.5CVSS5.8AI score0.00243EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/30 4:01 p.m.•17 views

WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Floating Action Buttons versions = 0.9.1...

5.3CVSS7AI score0.00473EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•3 views

CVE-2024-11893: Improper Neutralization of Input During Web Page Generation

The Spoki – Chat Buttons and WooCommerce Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spokibutton' shortcode in all versions up to, and including, 2.15.15 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score0.00397EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/18 12:15 p.m.•19 views

CVE-2024-49677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Cramer Bootstrap Buttons bootstrap-buttons allows Reflected XSS.This issue affects Bootstrap Buttons: from n/a through = 1.2...

7.1CVSS0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/18 11:38 a.m.•28 views

CVE-2024-49677 WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Cramer Bootstrap Buttons bootstrap-buttons allows Reflected XSS.This issue affects Bootstrap Buttons: from n/a through = 1.2...

7.1CVSS0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/18 11:38 a.m.•19 views

CVE-2024-49677 WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Cramer Bootstrap Buttons bootstrap-buttons allows Reflected XSS.This issue affects Bootstrap Buttons: from n/a through = 1.2...

7.1CVSS7.2AI score0.00333EPSS
SaveExploits0References1
Rows per page
Query Builder