Lucene search
+L

63 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•3 views

CVE-2025-47625: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Stored XSS.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

5.9CVSS5.8AI score0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•17 views

WordPress plugin DoFollow Case by Case 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress...

8.8CVSS8.5AI score0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•5 views

CVE-2025-47624: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

8.8CVSS5.8AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•24 views

PT-2025-20190 · Unknown · Dofollow Case By Case

Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions 3.5.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the use...

8.8CVSS8.9AI score0.00188EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/09 10:18 a.m.•12 views

CVE-2025-25152

Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...

7.1CVSS7.2AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•19 views

CVE-2025-25152

Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...

7.1CVSS0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/07 10:11 a.m.•7 views

CVE-2025-25152 WordPress Smart DoFollow plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...

7.1CVSS7.2AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•60 views

CVE-2025-25152

CVE-2025-25152 describes a CSRF to Stored XSS vulnerability in WordPress plugin Smart DoFollow (affected versions from n/a through 1.0.2). Base CVSS v3.1 score 7.1 ( HIGH ) with network attack vector, user interaction required. Root cause is CSRF enabling stored XSS. Connected documents indicate ...

7.1CVSS7.2AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•15 views

WordPress plugin Smart DoFollow 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.6AI score0.00142EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•15 views

CVE-2025-25152: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LukaszWiecek Smart DoFollow smart-dofollow allows Stored XSS.This issue affects Smart DoFollow: from n/a through = 1.0.2...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•14 views

PT-2025-5960 · Lukaszwiecek · Smart Dofollow

Name of the Vulnerable Software and Affected Versions: LukaszWiecek Smart DoFollow versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS9.4AI score0.00142EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/02/03 4:12 p.m.•12 views

WordPress Smart DoFollow plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Smart DoFollow versions = 1.0.2...

7.1CVSS6.2AI score0.00142EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/12/15 4:15 p.m.•15 views

CVE-2023-49197

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/15 4:15 p.m.•24 views

CVE-2023-49197

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

8.8CVSS0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/15 4:15 p.m.•22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

6.8CVSS7.2AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/15 3:39 p.m.•73 views

CVE-2023-49197

CVE-2023-49197 affects the WordPress DoFollow Case by Case plugin up to version 3.4.2, with a Cross-Site Request Forgery (CSRF) vulnerability. The issue is resolved in version 3.5.0. According to sources, exploitation could occur without privileged access and may require user interaction, with hi...

8.8CVSS8AI score0.00271EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/12/15 12:00 a.m.•13 views

WordPress Plugin DoFollow Case by Case Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.4AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•7 views

CVE-2023-49197: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoFollow Case by Case: from n/a through 3.4.2...

8.8CVSS7.8AI score0.00271EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/12/12 12:00 a.m.•17 views

DoFollow Case by Case < 3.5.0 - Email&URLs Adding to Allowlist via CSRF

Description The plugin does not have CSRF checks in its getEmail and getUrl functions, which could allow attackers to make logged in admins add email and URLs to the allow list via CSRF attacks...

8.8CVSS6.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/12/01 12:00 a.m.•19 views

WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software DoFollow Case by Case Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.5.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-49197 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1e74ba3bfbc6 Credits Skalucy...

8.8CVSS6.7AI score0.00271EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder