Lucene search
+L

407 matches found

Patchstack
Patchstack
added 2023/11/23 12:0 a.m.15 views

WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Decorator – WooCommerce Email Customizer Type Plugin Vulnerable versions = 1.2.7 Fixed in 1.2.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48284 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 73c25444dafc...

8.8CVSS7AI score0.00305EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/22 10:15 p.m.5 views

CVE-2023-47773

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

6.1CVSS7.3AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 10:15 p.m.20 views

CVE-2023-47773

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

7.1CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/22 10:15 p.m.18 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

5.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/22 10:5 p.m.81 views

CVE-2023-47773

CVE-2023-47773 : Reflected Cross-Site Scripting in the WordPress plugin Permalinks Customizer (YAS Global Team) versions

7.1CVSS6.6AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 10:5 p.m.24 views

CVE-2023-47773 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

7.1CVSS7.1AI score0.00412EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.8 views

PT-2023-30600 · Unknown · Yas Global Team Permalinks Customizer

Name of the Vulnerable Software and Affected Versions: YAS Global Team Permalinks Customizer plugin versions prior to 2.8.3 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potential malicious...

7.1CVSS6.7AI score0.00412EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.4 views

WordPress Plugin Permalinks Customizer Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6AI score0.00412EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/11/14 12:0 a.m.12 views

WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Permalinks Customizer Type Plugin Vulnerable versions = 2.8.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47773 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 75025c824dd0 Credits Le Ngoc Anh Required privilege...

7.1CVSS6.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/11/07 6:15 p.m.22 views

CVE-2022-47181

Cross-Site Request Forgery CSRF vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2...

8.8CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/07 6:15 p.m.8 views

CVE-2022-47181

Cross-Site Request Forgery CSRF vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2...

8.8CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/07 6:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cross Site Request Forgery.This issue affects Email Templates Customizer and Designer for WordPress and WooCommerce: from n/a through 1.4.2...

6.8CVSS7.3AI score0.00277EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/07 5:23 p.m.99 views

CVE-2022-47181

CVE-2022-47181 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin “Email Templates Customizer and Designer for WordPress and WooCommerce” (Email Templates). Affected versions are up to 1.4.2. The issue allows CSRF exploitation without authentication, with network attack vector ...

8.8CVSS8.5AI score0.00277EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/10/12 3:15 p.m.6 views

CVE-2023-45103

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 3:15 p.m.20 views

CVE-2023-45103

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/12 3:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

6.8CVSS8.7AI score0.00214EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 2:33 p.m.11 views

CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

4.3CVSS7.1AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/12 2:33 p.m.27 views

CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/12 2:33 p.m.55 views

CVE-2023-45103

CVE-2023-45103 refers to a CSRF vulnerability in the WordPress plugin Permalinks Customizer (YAS Global Team Permalinks Customizer) affecting versions up to and including 2.8.2. The connected Patchstack/CVE-2023-45103 entries describe the issue as CSRF via post_settings, with an unpatched status ...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.3 views

WordPress plugin Permalinks Customizer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
Rows per page
Query Builder