Lucene search
+L

23390 matches found

CNVD
CNVD
•added 2025/07/25 12:00 a.m.•11 views

WordPress Latest Post Accordian Slider plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Latest Post Accordian Slider plugin, which stems from a lack of random number validation on the lpaccordian...

6.1CVSS6.8AI score0.00117EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/25 12:00 a.m.•16 views

WordPress Like & Share My Site plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Like & Share My Site plugin, which arises from a web application that does not adequately validate whether a...

6.1CVSS6.7AI score0.00117EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/25 12:00 a.m.•75 views

Complaint Management System Cross-Site Request Forgery Vulnerability

Complaint Management System is a complaint management system. The Complaint Management System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could use this...

5.3CVSS6.8AI score0.00248EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•11 views

Simplehelp 安全漏洞

SimpleHelp is a remote support software from SimpleHelp, Inc. A security vulnerability exists in Simplehelp versions prior to 5.5.11 that stems from vulnerability to cross-site request forgery attacks...

8.8CVSS9.2AI score0.00171EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/24 12:00 a.m.•14 views

WordPress plugin Affiliate Plus 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress Affiliate Plus, which stems from missing or incorrect random number validation, and can be exploited by an...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References4
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•13 views

WordPress Restaurant Menu by MotoPress Cross-Site Request Forgery Vulnerability

WordPress Restaurant Menu by MotoPress is a menu plugin designed for the restaurant industry that supports free downloads and can be enhanced by adding paid extensions. WordPress Restaurant Menu by MotoPress has a cross-site request forgery vulnerability, the vulnerability stems from the WEB...

5.4CVSS6.9AI score0.00136EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•16 views

WordPress WP Post Hide Cross-Site Request Forgery Vulnerability

WordPress WP Post Hide is a plugin for controlling the visibility of WordPress posts, hiding the display of specific posts in different locations such as the home page, category pages, and search results pages. WordPress WP Post Hide suffers from a cross-site request forgery vulnerability, which...

4.3CVSS6.7AI score0.0014EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•19 views

WordPress FG Drupal to WordPress Cross-Site Request Forgery Vulnerability

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

4.4CVSS6.7AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/23 12:00 a.m.•14 views

WordPress plugin YANewsflash 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

6.1CVSS6.4AI score0.00125EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/23 12:00 a.m.•14 views

WordPress plugin Omnishop 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reques...

6.5CVSS6.4AI score0.00162EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/07/23 12:00 a.m.•19 views

The vulnerability of Zoom, a video conferencing software, related to the falsification of cross-site requests, allows attackers to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

4CVSS5.4AI score0.00249EPSS
SaveExploits0References2Affected Software18
CNNVD
CNNVD
•added 2025/07/22 12:00 a.m.•17 views

WordPress plugin Latest Post Accordian Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Latest Post Accordian Slider plugin, which stems from a lack of random number validation on the lpaccordian...

6.1CVSS6.7AI score0.00117EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/07/22 12:00 a.m.•17 views

WordPress plugin Like & Share My Site 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Like & Share My Site plugin, which arises from a web application that does not adequately validate whether a...

6.1CVSS6.6AI score0.00117EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2025/07/21 12:00 a.m.•8 views

VulnCheck KEV: CVE-2025-47204

An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.00443EPSS
SaveIn wildExploits0References111
OSV
OSV
•added 2025/07/19 4:15 p.m.•21 views

CVE-2025-7834

A vulnerability, which was classified as problematic, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

5.3CVSS4.8AI score0.00248EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/19 12:00 a.m.•21 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. The Complaint Management System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could use this...

5.3CVSS6.7AI score0.00248EPSS
SaveExploits1References6
OSV
OSV
•added 2025/07/18 5:15 p.m.•13 views

CVE-2025-50586

StudentManage v1.0 was discovered to contain Cross-Site Request Forgery CSRF...

6.5CVSS5.8AI score0.00166EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/07/18 12:00 a.m.•12 views

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from vulnerability to cross-site request forgery attacks...

6.5CVSS6.6AI score0.00166EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/07/18 12:00 a.m.•14 views

WordPress plugin Zuppler Online Ordering 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

6.1CVSS6.2AI score0.00125EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/18 12:00 a.m.•13 views

WordPress plugin Copymatic – AI Content Writer & Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.4AI score0.00133EPSS
SaveExploits0References3
Rows per page
Query Builder