Lucene search
+L

2056 matches found

CNNVD
CNNVD
added 2023/11/06 12:0 a.m.9 views

WordPress Plugin Custom Login Page | Temporary Users | Rebrand Login | Login Captcha Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Custom Login Page |...

8.8CVSS6.4AI score0.0021EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/03 5:15 a.m.7 views

CVE-2023-41350

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more...

9.8CVSS5.9AI score0.00754EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/03 5:15 a.m.26 views

Authentication flaw

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more...

7.5CVSS9.5AI score0.00754EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/03 4:44 a.m.21 views

CVE-2023-41350 Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more...

7.5CVSS7.5AI score0.00754EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/11/03 12:0 a.m.16 views

WC Captcha <= 1.5 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/31 8:15 a.m.19 views

CVE-2023-46210

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...

5.9CVSS5.4AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/31 8:15 a.m.8 views

CVE-2023-46210

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...

4.8CVSS6.6AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/31 7:38 a.m.30 views

CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...

5.9CVSS5.5AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/31 7:38 a.m.19 views

CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...

5.9CVSS5.6AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/31 7:38 a.m.55 views

CVE-2023-46210

CVE-2023-46210 affects the WebCource WC Captcha plugin for WordPress, with a Stored Cross-Site Scripting (XSS) vulnerability in versions 1.4 and validating site inputs, along with standard patching practices.

5.9CVSS5.1AI score0.00316EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.6 views

WordPress Plugin WC Captcha Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/31 12:0 a.m.7 views

PT-2023-29908 · Webcource · Webcource Wc Captcha

Name of the Vulnerable Software and Affected Versions: WebCource WC Captcha plugin versions = 1.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For WebCource WC Captcha plugin versions =...

5.9CVSS5.3AI score0.00316EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2023/10/26 11:30 a.m.32 views

PathFinder - Tool That Provides Information About A Website

Web Path Finder is a Python program that provides information about a website. It retrieves various details such as page title, last updated date, DNS information, subdomains, firewall names, technologies used, certificate information, and more. Retrieve important information about a website Gain...

6.9AI score
SaveExploits0References2
Patchstack
Patchstack
added 2023/10/19 12:0 a.m.17 views

WordPress WC Captcha Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software WC Captcha Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46210 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 587ee0fec2f4 Credits Rio Darmawan Required privilege...

5.9CVSS5.7AI score0.00316EPSS
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2023/10/17 5:8 p.m.29 views

Tennessee Valley Authority: captcha bypass leads to register multiple user with one valid captcha

Vulnerability description not provided...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.9 views

WordPress Contact Form With Captcha Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Contact Form With Captcha Type Plugin Vulnerable versions = 1.6.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Request Forgery CSRF CVE CVE-2023-45771 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 79f7e7f9285e Credits LEE SE...

7.1CVSS6AI score0.00333EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/10/11 8:15 a.m.25 views

CVE-2023-44997

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

8.8CVSS6.5AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/11 8:15 a.m.6 views

CVE-2023-44997

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

8.8CVSS7.3AI score0.00208EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/11 8:15 a.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

6.8CVSS8.8AI score0.00208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/11 7:57 a.m.37 views

CVE-2023-44997 WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin = 4.1 versions...

5.4CVSS9AI score0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder