Lucene search
K

238 matches found

Cvelist
Cvelist
added 2024/05/17 8:24 a.m.19 views

CVE-2024-24873 WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability

: Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP Polls: from n/a through 1.0.71...

5.3CVSS5.3AI score0.0021EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 8:23 a.m.25 views

CVE-2024-24874 WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71...

5.3CVSS5.4AI score0.00159EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.4 views

PT-2024-20630 · Codepeople · Codepeople Cp Polls

Name of the Vulnerable Software and Affected Versions: CodePeople CP Polls versions 1.0.71 and earlier Description: The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS, which allows Code Injection. This means that an attacker could...

5.3CVSS9.4AI score0.00159EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.3 views

PT-2024-20629 · Codepeople · Codepeople Cp Polls

Name of the Vulnerable Software and Affected Versions: CodePeople CP Polls versions 1.0.71 and earlier Description: The issue is related to an Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls, which allows Flooding. Recommendations: For versions 1.0.71 and earlier,...

5.3CVSS9.3AI score0.0021EPSS
Exploits0References4
NVD
NVD
added 2024/04/15 9:15 a.m.7 views

CVE-2024-31941

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3...

5.4CVSS5.5AI score0.00093EPSS
Exploits0References1
CVE
CVE
added 2024/04/15 9:11 a.m.49 views

CVE-2024-31941

CVE-2024-31941 affects the WordPress CP Media Player plugin (versions ≤ 1.1.3). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw, with unauthenticated exploitation potential as described by Patchstack; advisory notes indicate the issue has low severity (CVSS v3.1 base score 5.4) and ...

5.4CVSS5.2AI score0.00093EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/15 9:11 a.m.14 views

CVE-2024-31941 WordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3...

5.4CVSS5.8AI score0.00093EPSS
Exploits0References1
NVD
NVD
added 2024/04/10 4:15 p.m.10 views

CVE-2024-31302

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...

5.3CVSS5.2AI score0.00326EPSS
Exploits0References1
OSV
OSV
added 2024/04/10 4:15 p.m.2 views

CVE-2024-31302

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...

5.3CVSS5.8AI score0.00326EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/10 3:32 p.m.16 views

CVE-2024-31302 WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...

5.3CVSS8.5AI score0.00326EPSS
Exploits0References1
CVE
CVE
added 2024/04/10 3:32 p.m.62 views

CVE-2024-31302

CVE-2024-31302 affects the Contact Form Email plugin by CodePeople for WordPress. The vulnerability is described as an unauthenticated exposure of sensitive information via the plugin’s Contact Form Email feature, impacting versions from n/a up to 1.3.44. Public records in this set indicate an In...

5.3CVSS8.5AI score0.00326EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.3 views

PT-2024-23950 · Unknown · Codepeople Contact Form Email

Name of the Vulnerable Software and Affected Versions: CodePeople Contact Form Email versions 1.3.44 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made accessible to individuals who should...

5.3CVSS9.2AI score0.00326EPSS
Exploits0References4
OSV
OSV
added 2024/03/27 2:15 p.m.1 views

CVE-2024-29759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Calculated Fields Form: from n/a through 1.2.54...

6.1CVSS5.8AI score0.00196EPSS
Exploits0References1
NVD
NVD
added 2024/03/27 2:15 p.m.11 views

CVE-2024-29759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Calculated Fields Form: from n/a through 1.2.54...

7.1CVSS6.9AI score0.00196EPSS
Exploits0References1
CVE
CVE
added 2024/03/27 1:17 p.m.51 views

CVE-2024-29759

CVE-2024-29759 affects WordPress plugin Calculated Fields Form (CodePeople). Affected versions: up to 1.2.54. Root cause: improper neutralization of input during web page generation, enabling Reflected XSS. Public exploit details are not provided in the connected documents. No remediation details...

7.1CVSS8.6AI score0.00196EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/25 12:15 p.m.0 views

CVE-2023-25039

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2024/03/25 12:15 p.m.11 views

CVE-2023-25039

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS4.7AI score0.00119EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.2 views

PT-2024-12043 · Codepeople · Codepeople Google Maps Cp

Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...

4.3CVSS8.5AI score0.00119EPSS
Exploits0References4
NVD
NVD
added 2024/01/17 6:15 p.m.8 views

CVE-2022-41790

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...

8.8CVSS5.7AI score0.00132EPSS
Exploits0References1
OSV
OSV
added 2024/01/17 6:15 p.m.1 views

CVE-2022-41790

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...

8.8CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder