Lucene search
K

7 matches found

Patchstack
Patchstack
added 2025/12/31 6:15 a.m.3 views

WordPress WP Email Capture plugin <= 3.12.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Arif Shaikh in WordPress Plugin WP Email Capture versions = 3.12.5...

8.8CVSS7AI score0.00015EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/08 7:2 p.m.5 views

WordPress WP Email Capture plugin <= 3.12.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Email Capture versions = 3.12.4...

5.3CVSS6.8AI score0.00043EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 2:36 a.m.2 views

CVE-2023-23723

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...

5.9CVSS5.2AI score0.00207EPSS
Exploits0References1
Prion
Prion
added 2023/05/23 1:15 p.m.9 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...

6.8CVSS8.7AI score0.0016EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/05/23 12:46 p.m.42 views

CVE-2023-23724

CVE-2023-23724 concerns a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Email Capture by Winwar Media, affected versions are &lt;= 3.9.3. The root cause is CSRF in the plugin’s request handling, enabling unauthorized actions when a logged-in user visits a malicious pa...

8.8CVSS6.5AI score0.0016EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.0 views

WordPress plugin WP Email Capture 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.1AI score0.0016EPSS
Exploits0References2
OSV
OSV
added 2023/05/02 12:15 p.m.0 views

CVE-2023-23723

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Winwar Media WP Email Capture plugin = 3.9.3 versions...

4.8CVSS5.8AI score0.00207EPSS
Exploits0References1
Rows per page
Query Builder