Lucene search
K

13 matches found

CVE
CVE
added 2026/03/25 4:15 p.m.4 views

CVE-2026-32530

CVE-2026-32530 is an authenticated privilege-escalation vulnerability in Creator LMS (WordPress plugin) that affects versions from initial through 1.1.18. The issue is described as an incorrect privilege assignment that allows a contributor+ user to escalate privileges. CIRCL/CVE data confirms th...

8.8CVSS5.8AI score0.00058EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/06 4:36 p.m.20 views

CVE-2025-69359 WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through = 1.1.12...

5.3CVSS0.00077EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-24192

Malware in sbrugna...

4.3CVSS4.9AI score0.00143EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.2 views

CVE-2020-36751

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

4.3CVSS6.5AI score0.00143EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.1 views

WordPress plugin Bulk Page Stub Creator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.9AI score0.00199EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2024/05/14 6:30 p.m.2 views

io.antmedia.app:ConsoleApp (>=1.2.0 <=1.5.0), io.antmedia.app:LiveApp (>=1.2.0 <=1.8.1) +8 more potentially affected by CVE-2024-3462 via io.antmedia:ant-media-server (>=1.2.0 <=2.9.0)

io.antmedia:ant-media-server MAVEN version =1.2.0, =1.2.0, =1.2.0, =1.6.1, =2.15.0, =2.9.0, =2.14.0, =2.9.0, =2.6.1, =1.9.0, =1.2.0, =1.8.1 Source cves: CVE-2024-3462 Source advisory: OSV:GHSA-G95V-3PJ6-J433...

5.4CVSS6AI score0.00113EPSS
Exploits0
NVD
NVD
added 2023/10/20 8:15 a.m.15 views

CVE-2020-36751

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

4.3CVSS4.2AI score0.00143EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2023/10/20 7:29 a.m.6 views

CVE-2020-36751 Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

4.3CVSS5.8AI score0.00143EPSS
Exploits1References9
Cvelist
Cvelist
added 2023/10/20 7:29 a.m.18 views

CVE-2020-36751 Coupon Creator <= 3.1 - Cross-Site Request Forgery Bypass

The Coupon Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1. This is due to missing or incorrect nonce validation on the savemeta function. This makes it possible for unauthenticated attackers to save meta fields via a forged request...

4.3CVSS4.3AI score0.00143EPSS
Exploits1References9
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.1 views

WordPress Plugin Coupon Creator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS6.5AI score0.00143EPSS
Exploits1References10
OSV
OSV
added 2022/03/28 6:15 p.m.0 views

CVE-2022-0647

The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the posttype parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/03/28 12:0 a.m.1 views

WordPress plugin Bulk Creator 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Bulk Creator plugin 1.0.1 and earlier versions have a cross-site scripting vulnerability that stems from a failure to clean...

6.1CVSS4.8AI score0.0021EPSS
Exploits2References2
CNVD
CNVD
added 2015/08/08 12:0 a.m.1 views

Foxit Reader PDF Creator plug-in remote code execution vulnerability

Foxit Reader is a popular application for working with PDF files. A vulnerability exists in the handling of specially crafted PNG files by the PDF creator plug-in in Foxit Reader, which can trigger a buffer overflow vulnerability when converted to a PDF file, crashing the application or executing...

7.4AI score
Exploits0References1
Rows per page
Query Builder