Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:47 a.m.•17 views

CVE-2025-23673

Cross-Site Request Forgery CSRF vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through = 1.5...

7.1CVSS8.1AI score0.00174EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-3332

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00174EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/16 8:15 p.m.•5 views

CVE-2025-23673

Cross-Site Request Forgery CSRF vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through = 1.5...

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References3
NVD
NVD
•added 2025/01/16 8:15 p.m.•15 views

CVE-2025-23673

Cross-Site Request Forgery CSRF vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through = 1.5...

7.1CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:06 p.m.•62 views

CVE-2025-23673

CVE-2025-23673: CSRF in Email on Publish (WordPress plugin) can trigger Stored XSS in versions from n/a through 1.5. Root cause is CSRF enabling XSS payload execution; CVSS 3.1 base 7.1. No additional remediation details provided in the documents.

7.1CVSS7.2AI score0.00174EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•13 views

WordPress Email on Publish plugin <= 1.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Email on Publish versions = 1.5...

7.1CVSS6.2AI score0.00174EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•12 views

WordPress plugin Email on Publish 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.3AI score0.00174EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2025-23673: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in dkukral Email on Publish email-on-publish allows Stored XSS.This issue affects Email on Publish: from n/a through = 1.5...

7.1CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•8 views

PT-2025-5011

Name of the Vulnerable Software and Affected Versions Don Kukral Email on Publish versions n/a through 1.5 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...

7.1CVSS0.00174EPSS
SaveExploits0References4
Rows per page
Query Builder