Lucene search
+L

1027 matches found

Exploit DB
Exploit DB
added 2025/12/02 12:0 a.m.201 views

phpIPAM 1.5.1 - SQL Injection

Exploit Title: phpIPAM 1.5.1 - SQL Injection Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/phpipam/phpipam/ Software Link: https://github.com/phpipam/phpipam/ Version: 1.5.1 Tested on: Windows CVE : CVE-2023-1211 Proof Of Concept POST...

7.2CVSS7AI score0.0305EPSS
SaveExploits3
VulnCheck KEV
VulnCheck KEV
added 2025/12/02 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-13486

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepareform function. This is due to the function accepting user input and then passing that through calluserfuncarray. This makes it possible for...

9.8CVSS6.3AI score0.74331EPSS
SaveIn wildExploits10References3
Cvelist
Cvelist
added 2025/11/18 8:27 a.m.11 views

CVE-2025-12937 ACF Flexible Layouts Manager <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update

The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acfflmupdatetemplatewithpastedlayout' function in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers to...

6.5CVSS0.00198EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/18 8:27 a.m.4 views

CVE-2025-12937 ACF Flexible Layouts Manager <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update

The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acfflmupdatetemplatewithpastedlayout' function in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers to...

6.5CVSS5AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/18 8:27 a.m.22 views

CVE-2025-12937

CVE-2025-12937 affects the WordPress plugin ACF Flexible Layouts Manager (versions

6.5CVSS5AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/18 8:27 a.m.6 views

EUVD-2025-197941

The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acfflmupdatetemplatewithpastedlayout' function in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers to...

6.5CVSS4.9AI score0.00198EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/11/17 11:20 p.m.8 views

WordPress ACF Flexible Layouts Manager plugin <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update vulnerability

Missing Authorization to Unauthenticated Custom Field Update vulnerability discovered by Ahmad Salem a7mad.cc in WordPress Plugin ACF Flexible Layouts Manager versions = 1.1.6...

6.5CVSS7AI score0.00198EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/11/10 12:40 p.m.8 views

WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Denver Jackson in WordPress Plugin Custom Fields Account Registration For Woocommerce versions = 1.2...

7.2CVSS7AI score0.00343EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/07 12:19 a.m.14 views

CVE-2025-64114

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS8AI score0.00393EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/06 12:15 a.m.9 views

CVE-2025-64114

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS0.00393EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.8 views

ClipBucket SQL注入漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A SQL injection vulnerability exists in ClipBucket v5 versions 5.5.2 through 151 and earlier, which originates from a certified administrator with plugin management...

6.5CVSS8.3AI score0.00393EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/05 11:30 p.m.7 views

EUVD-2025-37959

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS7.5AI score0.00393EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/05 11:30 p.m.17 views

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS0.00393EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/05 11:30 p.m.5 views

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS7.5AI score0.00393EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/05 11:30 p.m.20 views

CVE-2025-64114

Summary: ClipBucket v5 (versions 5.5.2 and earlier) is vulnerable to an SQL injection through the ClipBucket Custom Fields plugin. The issue requires an authenticated administrator with plugin-management privileges and access to the Custom Fields plugin to execute arbitrary SQL against the databa...

6.5CVSS7.5AI score0.00393EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/11/05 11:30 p.m.8 views

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

6.5CVSS8AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.11 views

PT-2025-45168

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 and below Description ClipBucket v5 is a video sharing platform. Versions 5.5.2 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database...

6.5CVSS7.5AI score0.00393EPSS
SaveExploits1References8
CNVD
CNVD
added 2025/10/31 12:0 a.m.8 views

WordPress Plugin ACF Recent Posts Widget Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin ACF Recent Posts Widget, no...

5.4CVSS6AI score0.00196EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.15 views

WordPress Plugin ACF to REST API Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin ACF to REST API, which c...

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.6 views

EUVD-2025-35966

Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-rest-api allows Retrieve Embedded Sensitive Data.This issue affects ACF to REST API: from n/a through = 3.3.4...

5.3CVSS6.4AI score0.00228EPSS
SaveExploits0References2
Rows per page
Query Builder