Lucene search
+L

7907 matches found

NVD
NVD
•added 2022/11/17 11:15 p.m.•17 views

CVE-2022-40192

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

8.8CVSS0.00475EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/17 11:15 p.m.•26 views

Privilege escalation

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

6.5CVSS8.6AI score0.00962EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/11/17 11:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

6.8CVSS8.8AI score0.00475EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/17 10:14 p.m.•55 views

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

7.1CVSS9AI score0.00475EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/17 10:14 p.m.•72 views

CVE-2022-40192

CVE-2022-40192 concerns a Cross-Site Request Forgery (CSRF) in the WordPress wpForo Forum plugin. The vulnerability affects plugin versions

8.8CVSS8AI score0.00475EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/17 10:14 p.m.•8 views

CVE-2022-40192 WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

7.1CVSS7.5AI score0.00475EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/17 10:00 p.m.•84 views

CVE-2022-40200

The CVE CVE-2022-40200 affects the WordPress wpForo Forum plugin prior to 2.0.9. Authenticated users (subscriber+) can upload arbitrary files due to a vulnerability in the plugin, enabling potential unauthorized file writes. The issue is documented across multiple sources (NVD/NVD-derived records...

9.9CVSS8.7AI score0.00962EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/17 10:00 p.m.•12 views

CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

9.9CVSS9.5AI score0.00962EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/17 10:00 p.m.•41 views

CVE-2022-40200 WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

9.9CVSS9.6AI score0.00962EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•2 views

CVE-2022-40192: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

8.8CVSS5.8AI score0.00475EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/17 12:00 a.m.•29 views

PT-2022-25279 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to an Arbitrary File Upload vulnerability that affects authenticated subscribers and above in the wpForo Forum plugin on WordPress. Recommendations: For wpForo Foru...

9.9CVSS8.4AI score0.00962EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•3 views

CVE-2022-40200: Unrestricted Upload of File with Dangerous Type

Auth. subscriber+ Arbitrary File Upload vulnerability in wpForo Forum plugin = 2.0.9 on WordPress...

9.9CVSS5.8AI score0.00962EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/11/17 12:00 a.m.•32 views

WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by dhakalananda Patchstack Alliance in WordPress wpForo Forum plugin versions = 2.0.9. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 2.1.0...

8.8CVSS3.8AI score0.00475EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/17 12:00 a.m.•12 views

PT-2022-25273 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions prior to 2.0.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.5AI score0.00475EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/17 12:00 a.m.•31 views

WordPress plugin wpForo Forum 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.2AI score0.00962EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/17 12:00 a.m.•14 views

WordPress plugin wpForo Forum 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.7AI score0.00475EPSS
SaveExploits0References2
Code423n4
Code423n4
•added 2022/11/13 12:00 a.m.•32 views

Unsafe ERC20 operations due to lack of contract length check

Lines of code Vulnerability details Impact Functions executeERC20DirectTransfer and executeERC20TransferFrom replicates solmate libraries methods. The problem with this is that these functions does not check existence of code at the token address. If executeERC20DirectTransferand...

7.2AI score
SaveExploits0
Patchstack
Patchstack
•added 2022/11/09 12:00 a.m.•31 views

WordPress Asgaros Forum plugin <= 2.1.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Dhakal Ananda Patchstack Alliance in the WordPress Asgaros Forum plugin versions = 2.1.0. Solution No patched version is available. No reply from the vendor...

4.4AI score0.00264EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2022/11/09 12:00 a.m.•38 views

WordPress wpForo Forum plugin <= 2.0.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Rafie Muhammad aka Yeraisci Patchstack Alliance in WordPress wpForo Forum plugin versions = 2.0.9. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 2.1.0...

9.9CVSS3.8AI score0.00962EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2022/11/08 7:15 p.m.•39 views

CVE-2022-40632

Cross-Site Request Forgery CSRF vulnerability in gVectors Team wpForo Forum plugin = 2.0.5 on WordPress leading to topic deletion...

5.4CVSS0.00276EPSS
SaveExploits0References2
Rows per page
Query Builder