Lucene search
+L

1606 matches found

Vulnrichment
Vulnrichment
added 2024/12/14 4:23 a.m.10 views

CVE-2024-12555 SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS6.5AI score0.00196EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/14 4:23 a.m.22 views

CVE-2024-12555 SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS0.00196EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/14 4:23 a.m.43 views

CVE-2024-12555

CVE-2024-12555 : The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to 1.0 due to missing nonce validation, allowing unauthenticated attackers to induce an admin action that can inject malicious scripts via a forged request. The description and ...

6.1CVSS5.9AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/14 12:0 a.m.5 views

WordPress plugin SIP Calculator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin SIP...

6.1CVSS8.4AI score0.00196EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/12/13 8:25 p.m.5 views

WordPress SIP Calculator plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin SIP Calculator versions = 1.0...

6.1CVSS5.9AI score0.00196EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/12/13 3:15 p.m.14 views

CVE-2023-40011

Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42...

5.4CVSS0.00442EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.42 views

CVE-2023-40011

CVE-2023-40011 affects WordPress Cost Calculator Builder plugin (

5.4CVSS8.6AI score0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.22 views

CVE-2023-40011 WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42...

5.4CVSS0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 8:24 a.m.10 views

CVE-2024-12465 Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Property Hive Stamp Duty Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stampdutycalculatorscotland' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS5.8AI score0.00303EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.4 views

WordPress plugin Property Hive Stamp Duty Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.4CVSS7.9AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.6 views

PT-2024-17606 · WordPress · Property Hive Stamp Duty Calculator

Name of the Vulnerable Software and Affected Versions: Property Hive Stamp Duty Calculator plugin for WordPress versions up to, and including, 1.0.22 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'stamp duty calculator scotland' shortcode due to insufficient...

6.4CVSS6.2AI score0.00303EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.5 views

WordPress plugin Cost Calculator Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.6AI score0.00442EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/12 8:11 p.m.4 views

WordPress Property Hive Stamp Duty Calculator plugin <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Stamp Duty Calculator versions = 1.0.22...

6.4CVSS5.7AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/10 8:23 a.m.25 views

CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter

The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00344EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.8 views

WordPress plugin Property Hive Mortgage Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8AI score0.00344EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/12/09 10:49 p.m.5 views

WordPress Property Hive Mortgage Calculator plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via price Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Mortgage Calculator versions = 1.0.6...

6.4CVSS5.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/12/09 4:2 a.m.7 views

MAL-2024-11428 Malicious code in public-api-signature-calculator-example (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 9:58 p.m.0 views

Malicious code in @facetca/calculator (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/12/08 9:58 p.m.2 views

MAL-2024-11267 Malicious code in @facetca/calculator (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2024/11/28 11:23 a.m.18 views

CVE-2024-53731 WordPress Fintelligence Calculator plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fintelligence Fintelligence Calculator fintelligence-calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through = 1.0.3...

6.5CVSS0.003EPSS
SaveExploits0References1
Rows per page
Query Builder