Lucene search
K

30 matches found

CNNVD
CNNVD
added 2026/05/27 12:0 a.m.4 views

WordPress plugin Facebook for WooCommerce 输入验证错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.7CVSS5.8AI score0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-3573

Malware in sbrugna...

9.8CVSS9.2AI score0.01019EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-6705

Malware in sbrugna...

8.8CVSS8.7AI score0.00109EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-6757

Malware in sbrugna...

8.8CVSS8.8AI score0.00132EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1714

Malware in sbrugna...

4.3CVSS6.3AI score0.00174EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-6758

Malware in sbrugna...

8.8CVSS8.8AI score0.00132EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:43 a.m.5 views

CVE-2023-5740

The Live Chat with Facebook Messenger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'messenger' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS6.1AI score0.00193EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 a.m.6 views

CVE-2019-15840

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

8.8CVSS7.1AI score0.00132EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:23 a.m.9 views

CVE-2015-1582

Multiple cross-site scripting XSS vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow 1 remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration task to the default URI or remote administrators to inject arbitrary web script or...

4.3CVSS6.1AI score0.00174EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:52 a.m.5 views

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

6.9CVSS6.8AI score0.01273EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/13 12:43 a.m.19 views

CVE-2023-46619 WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebDorado WDSocialWidgets plugin = 1.0.15 versions...

5.4CVSS9AI score0.00053EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.2 views

WordPress Plugin add-facebook Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS5.9AI score0.00127EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.6 views

WordPress Customer Chat Facebook Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Customer Chat Facebook Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 36d502d50ea9 Credits Rafie Muhammad Patchstack...

6.8AI score0.00209EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2021/04/14 12:0 a.m.10 views

WordPress Plugin Cross-Site Request Forgery Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Cross-site request forgery vulnerability exists in the...

8.8CVSS6.6AI score0.00149EPSS
Exploits2References1
OSV
OSV
added 2021/04/12 2:15 p.m.1 views

CVE-2021-24218

The wpajaxsavefbesettings and wpajaxdeletefbesettings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved...

8.8CVSS5.8AI score0.00149EPSS
Exploits2References2
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.6 views

WordPress 插件 代码问题漏洞

WordPress Plugin is an open source application plugin for WordPress. The WordPress Facebook for WordPress plugin has a security vulnerability prior to version 3.0.0, which can be exploited by attackers to achieve remote code execution via the available magic methods...

8.1CVSS6.5AI score0.06505EPSS
Exploits2References3
Patchstack
Patchstack
added 2021/03/25 12:0 a.m.9 views

WordPress Facebook for WordPress plugin <= 3.0.3 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress Facebook for WordPress plugin versions 3.0.0 – 3.0.3. Solution Update the WordPress Facebook for WordPress plugin to the latest available version at least 3.0.4...

1.9AI score
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/09/02 12:0 a.m.4 views

WordPress facebook-for-woocommerce plugin cross-site request forgery vulnerability (CNVD-2019-30104)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. facebook-for-woocommerce is a plug-in that enables marketing through Facebook. A cross-site request forgery vulnerability exis...

8.8CVSS6.7AI score0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/08/30 4:15 p.m.23 views

CVE-2019-15840

The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF...

8.8AI score0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/08/29 12:33 p.m.12 views

CVE-2019-15781

The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF...

8.8AI score0.00109EPSS
Exploits0References2
Rows per page
Query Builder