Lucene search
+L

1412 matches found

CNNVD
CNNVD
added 2024/11/04 12:0 a.m.11 views

WordPress plugin Multi Purpose Mail Form 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS7AI score0.00611EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.13 views

PT-2024-34309 · Unknown · Rsvpmaker For Toastmasters

Name of the Vulnerable Software and Affected Versions: RSVPMaker for Toastmasters versions prior to 6.2.4 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This poses a risk of web server compromise...

10CVSS7.3AI score0.00496EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.11 views

PT-2024-34303

Name of the Vulnerable Software and Affected Versions: Multi Purpose Mail Form versions n/a through 1.0.2 Description: The issue allows users to upload dangerous files, potentially leading to a web server compromise by uploading a web shell. This can happen due to an unrestricted upload of file...

10CVSS5.2AI score0.00611EPSS
SaveExploits2References11
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.6 views

WordPress plugin RSVPMaker for Toastmasters 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS7.1AI score0.00496EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.7 views

PT-2024-34286 · WordPress · Ean For Woocommerce

Name of the Vulnerable Software and Affected Versions: AR For Woocommerce versions n/a through 6.2 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations: For versions n/a through 6.2,...

10CVSS7.3AI score0.00991EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.9 views

PT-2024-34259 · Unknown · Woocommerce Product Design

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Design versions prior to 1.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. Recommendations: For versions...

10CVSS7AI score0.01033EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.5 views

WordPress plugin Woocommerce Product Design 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS7AI score0.01033EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.7 views

PT-2024-34261 · Unknown · Mahlamusa Multi Purpose Mail Form

Name of the Vulnerable Software and Affected Versions: Mahlamusa Multi Purpose Mail Form versions 1.0.2 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. Recommendations: For...

10CVSS6.9AI score0.00496EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.11 views

PT-2024-34201 · WordPress · Surveyjs: Drag & Drop Wordpress Form Builder

Name of the Vulnerable Software and Affected Versions: SurveyJS: Drag & Drop WordPress Form Builder versions 1.9.136 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability. This means that the software may allow uploading files of dangero...

9.9CVSS6.8AI score0.01015EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.4 views

WordPress plugin Marketing Automation by AZEXO 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.9CVSS6.8AI score0.00478EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.5 views

WordPress plugin Multi Purpose Mail Form 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS6.9AI score0.00496EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.5 views

WordPress plugin SurveyJS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.9CVSS6.9AI score0.01015EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.5 views

WordPress plugin aDirectory 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

10CVSS6.6AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.12 views

PT-2024-34257 · Azexo · Marketing Automation

Name of the Vulnerable Software and Affected Versions: Marketing Automation by AZEXO versions 1.27.80 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. Recommendations: For...

9.9CVSS6.7AI score0.00478EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.8 views

WordPress plugin Ajar in5 Embed 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS7AI score0.01033EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/28 9:15 p.m.4 views

CVE-2024-50495

Unrestricted Upload of File with Dangerous Type vulnerability in WidgiLabs Plugin Propagator allows Upload a Web Shell to a Web Server.This issue affects Plugin Propagator: from n/a through 0.1...

9.8CVSS5.8AI score0.00501EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.6 views

WordPress plugin AR For WordPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS7.2AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.12 views

PT-2024-34273 · Widgilabs · Widgilabs Plugin Propagator

Name of the Vulnerable Software and Affected Versions: WidgiLabs Plugin Propagator versions 0.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized acces...

10CVSS6.9AI score0.00501EPSS
SaveExploits0References7
CVE
CVE
added 2024/10/23 3:34 p.m.45 views

CVE-2024-49671

CVE-2024-49671 affects the WordPress plugin AI Image Generator for Your Content & Featured Images – AI Postpix (ai-postpix) up to version 1.1.8. It is an Arbitrary File Upload vulnerability (Restricted file type) that enables an authenticated subscriber to upload a web shell to the server, potent...

9.9CVSS5.7AI score0.00508EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.5 views

WordPress plugin Verbalize WP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS7.1AI score0.01457EPSS
SaveExploits0References1
Rows per page
Query Builder