Lucene search
K

104 matches found

Patchstack
Patchstack
added 2021/11/11 12:0 a.m.14 views

WordPress Contact Form Email plugin <= 1.3.24 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Mohammed Aadhil Ashfaq in WordPress Contact Form Email plugin versions = 1.3.24. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.3.25...

4.8CVSS2AI score0.00598EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2021/10/25 1:20 p.m.48 views

CVE-2021-24774

The CVE-2021-24774 entry applies to the WordPress plugin Check & Log Email (before version 1.0.3). The vulnerability is a SQL injection caused by failing to validate/escape the GET parameters order and orderby when viewing logs, allowing manipulation of SQL statements. Affected component: Check &...

7.2CVSS7AI score0.01275EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2021/09/27 12:0 a.m.39 views

WordPress Check & Log Email plugin <= 1.0.2 - Multiple SQL Injection (SQLi) vulnerabilities

Multiple SQL Injection SQLi vulnerabilities were discovered by bl4derunner in WordPress Check & Log Email plugin versions = 1.0.2. Solution Update the WordPress Check & Log Email plugin to the latest available version at least 1.0.3...

2.7AI score0.01275EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2020/07/17 9:22 p.m.33 views

CVE-2020-5767

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link...

6.4AI score0.00917EPSS
Exploits2References1
CNVD
CNVD
added 2019/10/12 12:0 a.m.3 views

CloudBees Jenkins LDAP Email Plugin Password Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...

7.5CVSS6.6AI score0.00887EPSS
Exploits0References1
OSV
OSV
added 2019/10/01 2:15 p.m.2 views

CVE-2019-10434

Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5CVSS7.1AI score0.00887EPSS
Exploits0References2
NVD
NVD
added 2019/10/01 2:15 p.m.8 views

CVE-2019-10434

Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5CVSS7.6AI score0.00887EPSS
Exploits0References2
CVE
CVE
added 2019/10/01 1:45 p.m.67 views

CVE-2019-10434

The CVE-2019-10434 entry concerns the Jenkins LDAP Email Plugin which transmits configured credentials in plain text in the global Jenkins configuration form, potentially exposing them. Connected sources reiterate: credentials disclosure via the configuration UI, specifically affecting the Jenkin...

7.5CVSS7.5AI score0.00887EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/08/29 12:0 a.m.1 views

WordPress check-email plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress check-email plugin versions prior to 0.5.2. The...

6.1CVSS6.3AI score0.00913EPSS
Exploits0References1
OSV
OSV
added 2019/08/27 12:15 p.m.1 views

CVE-2016-10934

The check-email plugin before 0.5.2 for WordPress has XSS...

6.1CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2019/08/27 11:48 a.m.19 views

CVE-2016-10934

The check-email plugin before 0.5.2 for WordPress has XSS...

6.4AI score0.00913EPSS
Exploits0References1
CVE
CVE
added 2019/08/27 11:48 a.m.44 views

CVE-2016-10934

CVE-2016-10934 affects the WordPress Check Email plugin prior to 0.5.2, with an XSS vulnerability stemming from insufficient validation of client-side data. Exploitation could involve remote access with network access and requires user interaction per CVSS details; impact is limited to client-sid...

6.1CVSS6.4AI score0.00913EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/13 4:46 p.m.19 views

CVE-2018-20963

The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...

6.4AI score0.00915EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/08/13 4:46 p.m.19 views

CVE-2018-20964

The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...

8.8AI score0.00681EPSS
Exploits1References1
Patchstack
Patchstack
added 2019/03/12 12:0 a.m.20 views

WordPress Contact Form Email plugin <= 1.2.65 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Tim Coen in WordPress Contact Form Email plugin versions = 1.2.65. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.2.66...

6.1CVSS3.6AI score0.01389EPSS
Exploits2References2Affected Software1
0day.today
0day.today
added 2018/03/02 12:0 a.m.34 views

IrfanView 4.50 Email Plugin - Buffer Overflow (SEH Unicode) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.50 Email PlugIn - Local Buffer Overflow SEH Unicode Date: 02-07-2018 Vulnerable Software: IrfanView 4.50 Email PlugIn Vendor Homepage: http://www.irfanview.com/...

7.2AI score
Exploits0
exploitpack
exploitpack
added 2018/03/02 12:0 a.m.24 views

IrfanView 4.50 Email Plugin - Buffer Overflow (SEH Unicode)

IrfanView 4.50 Email Plugin - Buffer Overflow SEH Unicode !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.50 Email PlugIn - Local Buffer Overflow SEH Unicode Date: 02-07-2018 Vulnerable Software: IrfanView 4.50 Email PlugIn Vendor Homepage: http://www.irfanview.com...

0.6AI score
Exploits0
Packet Storm
Packet Storm
added 2018/03/02 12:0 a.m.40 views

IrfanView 4.50 SEH Unicode Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.50 Email PlugIn - Local Buffer Overflow SEH Unicode Date: 02-07-2018 Vulnerable Software: IrfanView 4.50 Email PlugIn Vendor Homepage: http://www.irfanview.com/ Version: 4.50 Software Link:...

0.5AI score
Exploits0
Packet Storm
Packet Storm
added 2018/03/02 12:0 a.m.33 views

IrfanView 4.44 SEH Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.44 Email PlugIn - Local Buffer Overflow SEH Date: 02-07-2018 Vulnerable Software: IrfanView 4.44 Email PlugIn Vendor Homepage: http://www.irfanview.com/ Version: 4.44 Software Link:...

0.6AI score
Exploits0
0day.today
0day.today
added 2018/03/02 12:0 a.m.22 views

IrfanView 4.44 Email Plugin - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: IrfanView 4.44 Email PlugIn - Local Buffer Overflow SEH Date: 02-07-2018 Vulnerable Software: IrfanView 4.44 Email PlugIn Vendor Homepage: http://www.irfanview.com/ Version:...

0.2AI score
Exploits0
Rows per page
Query Builder