Lucene search
+L

538 matches found

OSV
OSV
added 2024/02/12 9:15 a.m.6 views

CVE-2024-24887

Cross-Site Request Forgery CSRF vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

8.8CVSS7.3AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/12 9:15 a.m.30 views

CVE-2024-24887

Cross-Site Request Forgery CSRF vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

8.8CVSS5.5AI score0.00208EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/12 9:15 a.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

5.8CVSS7.2AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/12 8:43 a.m.35 views

CVE-2024-24887 WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

5.4CVSS5.8AI score0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/12 8:43 a.m.13 views

CVE-2024-24887 WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

5.4CVSS7AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/12 8:43 a.m.104 views

CVE-2024-24887

CVE-2024-24887 is a CSRF vulnerability in the WordPress plugin Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting (Contest Gallery). Affected versions are up to 21.2.8.4; patch 21.2.9 fixes the issue. Patchstack and CVE records confirm low-severity risk with una...

8.8CVSS6.7AI score0.00208EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/12 12:00 a.m.10 views

WordPress Plugin Photos and Files Contest Gallery Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.7AI score0.00208EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:00 a.m.13 views

PT-2024-20643 · WordPress · Contest Gallery Photos/Files Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress versions through 21.2.8.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of...

8.8CVSS9.4AI score0.00208EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
added 2024/02/08 12:00 a.m.19 views

Contest Gallery < 21.2.9 - Cross-Site Request Forgery

Description The Contest Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 21.2.8.4. This is due to missing or incorrect nonce validation in the prev10/prev10-admin/gallery/gallery.php file. This makes it possible for unauthenticated attacke...

5.8CVSS6.3AI score0.00208EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/02/05 12:00 a.m.16 views

WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Contest Gallery Type Plugin Vulnerable versions = 21.2.8.4 Fixed in 21.2.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24887 Patch priority Low CVSS severity Low 5.4 Developer Wasiliy Strecker PSID bc8832951ec5 Credits Dhabaleshwar D...

8.8CVSS6.6AI score0.00208EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/11/28 12:00 a.m.29 views

WordPress Photos and Files Contest Gallery Plugin < 10.4.5 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:contest-gallery:contestgallery"; if description...

8.8CVSS7AI score0.01135EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/10/31 12:00 a.m.20 views

WordPress Contest Gallery Plugin < 21.2.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Contest Gallery Type Plugin Vulnerable versions 21.2.8.1 Fixed in 21.2.8.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5307 Patch priority Medium CVSS severity Medium 7.1 Developer Wasiliy Strecker PSID 79977d335b6c Credits Dmitrii...

6.1CVSS5.6AI score0.00501EPSS
SaveExploits2References4Affected Software1
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.9 views

WordPress Plugin Photos and Files Contest Gallery Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

6.1CVSS5.9AI score0.00501EPSS
SaveExploits2References3
OSV
OSV
added 2023/06/22 12:15 p.m.6 views

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/22 12:15 p.m.20 views

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/22 12:15 p.m.17 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/22 11:21 a.m.16 views

CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/22 11:21 a.m.48 views

CVE-2023-28784

CVE-2023-28784 affects the WordPress plugin Contest Gallery (

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 11:21 a.m.24 views

CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/22 12:00 a.m.5 views

PT-2023-21959 · WordPress · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery plugin versions = 21.1.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing them to...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References3
Rows per page
Query Builder