Lucene search
+L

301 matches found

Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•12 views

CVE-2023-25037 WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople Booking Calendar Contact Form booking-calendar-contact-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar Contact Form: from n/a through = 1.2.34...

4.3CVSS7.3AI score0.00556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•14 views

PT-2024-12011 · Codepeople · Codepeople Wp Time Slots Booking Form

Name of the Vulnerable Software and Affected Versions: CodePeople WP Time Slots Booking Form versions 1.1.82 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

7.2CVSS6.9AI score0.00711EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•13 views

PT-2024-12042 · Codepeople · Codepeople Booking Calendar Contact Form

Name of the Vulnerable Software and Affected Versions: CodePeople Booking Calendar Contact Form versions 1.2.34 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: F...

4.3CVSS8.6AI score0.00556EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•2 views

PT-2024-12000

Name of the Vulnerable Software and Affected Versions CodePeople CP Multi View Event Calendar versions 1.4.13 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations...

3.8CVSS0.0047EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•4 views

CVE-2023-25037: Missing Authorization

Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar Contact Form: from n/a through 1.2.34...

4.3CVSS7.9AI score0.00556EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•6 views

CVE-2023-23814: Missing Authorization

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through 1.4.13...

3.8CVSS5.9AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/06 12:15 p.m.•34 views

CVE-2024-47297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/06 11:46 a.m.•62 views

CVE-2024-47297

CVE-2024-47297 : WordPress CP Polls plugin versions up to 1.0.74 are vulnerable to a reflected XSS due to improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). Patch information from Patchstack indicates the vulnerability is fixed in CP Polls 1.0.75. Af...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/06 11:46 a.m.•48 views

CVE-2024-47297 WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/06 11:46 a.m.•18 views

CVE-2024-47297 WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/06 12:00 a.m.•2 views

PT-2024-32507

Name of the Vulnerable Software and Affected Versions CodePeople CP Polls versions 1.0.74 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations For versions...

7.1CVSS5.8AI score0.0032EPSS
SaveExploits0References8
OSV
OSV
•added 2024/07/18 7:44 a.m.•56 views

BIT-WORDPRESS-2023-28492

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS4.5AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/18 7:43 a.m.•14 views

BIT-WORDPRESS-MULTISITE-2023-28492

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS4.5AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/10 8:15 a.m.•12 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 8:15 a.m.•41 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 7:43 a.m.•43 views

CVE-2024-35735 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

5.3CVSS0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 7:43 a.m.•71 views

CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...

9.8CVSS7.3AI score0.00402EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/10 7:43 a.m.•28 views

CVE-2024-35735 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

5.3CVSS7AI score0.00402EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•4 views

PT-2024-26687

Name of the Vulnerable Software and Affected Versions CodePeople WP Time Slots Booking Form versions 1.2.11 and earlier Description The issue is related to a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form. Recommendations For versions 1.2.11 and earlier, update t...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•3 views

CVE-2024-35735: Missing Authorization

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Rows per page
Query Builder