Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-50944

Malicious code in bioql PyPI...

5.4CVSS8.7AI score0.00128EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:56 a.m.4 views

CVE-2024-12541

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the addchativewidgetaction function. This makes it possible for unauthenticated attackers to change...

5.4CVSS6.4AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 4:15 a.m.3 views

CVE-2024-12541

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the addchativewidgetaction function. This makes it possible for unauthenticated attackers to change...

5.4CVSS0.00128EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/07 3:21 a.m.11 views

CVE-2024-12541 Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the addchativewidgetaction function. This makes it possible for unauthenticated attackers to change...

5.4CVSS0.00128EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/07 3:21 a.m.4 views

CVE-2024-12541 Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the addchativewidgetaction function. This makes it possible for unauthenticated attackers to change...

5.4CVSS6.5AI score0.00128EPSS
Exploits0References3
CVE
CVE
added 2025/01/07 3:21 a.m.38 views

CVE-2024-12541

CVE-2024-12541 affects the Chative Live chat and Chatbot WordPress plugin up to version 1.1. The issue is Cross-Site Request Forgery due to missing or incorrect nonce validation in add_chative_widget_action(), enabling unauthenticated attackers to forge requests that change the channel ID or orga...

5.4CVSS5.2AI score0.00128EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

WordPress plugin Chative Live chat and Chatbot 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS8.2AI score0.00128EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/06 5:4 p.m.2 views

WordPress Chative Live chat and Chatbot plugin <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function vulnerability

Cross-Site Request Forgery via addchativewidgetaction Function vulnerability discovered by Peter Thaleikis in WordPress Plugin Chative Live chat and Chatbot versions = 1.1...

5.4CVSS7AI score0.00128EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder