Lucene search
K

13 matches found

CNVD
CNVD
added 2025/11/18 12:0 a.m.1 views

WordPress Plugin Comment Edit Core - Simple Comment Editing Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Comment Edit Core - Simple Comment Editing has an information disclosure...

5.3CVSS5.8AI score0.00046EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/14 8:10 a.m.3 views

CVE-2025-12681

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

5.3CVSS5.9AI score0.00046EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 9:31 a.m.1 views

EUVD-2025-158263

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

5.3CVSS5.4AI score0.00046EPSS
Exploits0References4
NVD
NVD
added 2025/11/13 8:15 a.m.2 views

CVE-2025-12681

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

5.3CVSS0.00046EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/13 7:27 a.m.2 views

CVE-2025-12681 Comment Edit Core – Simple Comment Editing <= 3.1.0 - Unauthenticated Sensitive Information Exposure

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...

5.3CVSS5.4AI score0.00046EPSS
Exploits0References3
CVE
CVE
added 2025/11/13 7:27 a.m.10 views

CVE-2025-12681

CVE-2025-12681 affects the WordPress plugin Comment Edit Core – Simple Comment Editing, up to version 3.1.0. The root cause is an unauthenticated exposure via the ajax_get_comment function, allowing any visitor to access sensitive data such as user IDs, IP addresses, and email addresses. Wordfenc...

5.3CVSS5.5AI score0.00046EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.2 views

PT-2025-46785

The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajax get comment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, I...

5.3CVSS5.9AI score0.00046EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

WordPress plugin Comment Edit Core – Simple Comment Editing 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Comment Edit Core - Simple Comment Editing has an information disclosure...

5.3CVSS5.7AI score0.00046EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/12 11:45 p.m.3 views

WordPress Comment Edit Core – Simple Comment Editing plugin <= 3.1.0 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Powpy in WordPress Plugin Comment Edit Core – Simple Comment Editing versions = 3.1.0...

5.3CVSS6.7AI score0.00046EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 12:0 p.m.8 views

CVE-2025-24703

Server-Side Request Forgery SSRF vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request Forgery.This issue affects Comment Edit Core – Simple Comment Editing: from n/a through = 3.0.33...

4.4CVSS7.2AI score0.00051EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.2 views

WordPress Comment Edit Core – Simple Comment Editing Plugin <= 3.0.33 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Marek Mikita in WordPress Plugin Comment Edit Core – Simple Comment Editing versions = 3.0.33...

4.4CVSS7AI score0.00051EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.1 views

WordPress plugin Comment Edit Core – Simple Comment Editing 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPres...

4.4CVSS8.4AI score0.00051EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.1 views

PT-2025-5517 · Unknown · Dlx Plugins Comment Edit Core

Name of the Vulnerable Software and Affected Versions: DLX Plugins Comment Edit Core – Simple Comment Editing versions through 3.0.33 Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions through 3.0.33,...

4.4CVSS7AI score0.00051EPSS
Exploits0References3
Rows per page
Query Builder