Lucene search
+L

2 matches found

CNNVD
CNNVD
added 2024/04/17 12:0 a.m.7 views

WordPress Plugin Honeypot for WP Comment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

5.3CVSS7.8AI score0.00359EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/16 3:52 p.m.8 views

CVE-2021-4227 Ark Comment Editor <= 2.15.6 - Iframe Injection via Comment

The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment section...

5.4AI score0.00608EPSS
SaveExploits1References1
Rows per page
Query Builder