WordPress RSS Feed Retriever Plugin <= 1.6.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software RSS Feed Retriever Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 3.1 Developer Claim ownership PSID de28d2cfcddb Credits N/A Required privilege...

WordPress RSS Feed Retriever Plugin <= 1.6.7 is vulnerable to Broken Access Control

Software RSS Feed Retriever Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 7b026c8a46c6 Credits N/A Required privilege...

CVE-2022-3994

The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in certain configurations...

CVE-2022-3994

The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in certain configurations...

CVE-2022-3994 Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure

The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in certain configurations...

CVE-2022-3994

The CVE-2022-3994 issue affects the Authenticator WordPress plugin prior to version 1.3.1. The root cause is the plugin not restricting subscribers from updating a site's feed access token, which may deny other users access to the feature in certain configurations. The documented impact is increa...

WordPress plugin Authenticator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin WP RSS By Publishers SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

PT-2023-13734 · WordPress · Authenticator

Name of the Vulnerable Software and Affected Versions: Authenticator WordPress plugin versions prior to 1.3.1 Description: The issue arises from the plugin's failure to restrict subscribers from updating a site's feed access token. This could potentially deny other users access to certain...

Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. Exploit...

Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. PoC Exploit...

CVE-2018-0125

creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...

CVE-2022-27518

creationtimestamp| type| source ---|---|--- 2022-12-13 13:44:48+00:00| seen| https://www.cert.at/de/warnungen/2022/12/kritische-sicherheitslucke-in-citrix-adc-und-citrix-gateway 2022-12-13 14:51:44+00:00| exploited| https://t.me/ctinow/81148 2022-12-13 16:11:54+00:00| exploited|...

CVE-2022-31199

creationtimestamp| type| source ---|---|--- 2022-12-12 10:33:31+00:00| exploited| https://t.me/itsecnews/1908 2022-12-19 13:27:18+00:00| seen| MISP/a07cce34-4146-472f-92d1-e5334d2158c6 2023-07-07 11:36:40+00:00| seen| https://t.me/KomunitiSiber/455 2023-07-07 11:51:07+00:00| seen|...

UniswapV3 tokens of certain pairs will be wrongly valued, leading to liquidations.

Lines of code Vulnerability details Description UniswapV3OracleWrapper is responsible for price feed of UniswapV3 NFT tokens. Its getTokenPrice is used by the health check calculation in GenericLogic. getTokenPrice gets price from the oracle and then uses it to calculate value of its liquidity...

CVE-2022-40765

creationtimestamp| type| source ---|---|--- 2022-11-22 07:12:40+00:00| seen| https://t.me/cibsecurity/53298 2023-02-22 06:49:53+00:00| exploited| https://t.me/thehackernews/3079 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 01:25:42+00:00| seen|...

CVE-2022-45047

creationtimestamp| type| source ---|---|--- 2022-11-17 15:58:44+00:00| seen| https://t.me/cibsecurity/53051 2024-02-16 15:31:45+00:00| seen| https://t.me/ctinow/186441 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-07-29...

The vulnerability of the Cisco Email Security Appliance’s security system and the Cisco Secure Email and Web Manager, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to perform attacks by splitting HTTP responses.

The vulnerability of the Cisco Email Security Appliance’s security system and the Cisco Secure Email and Web Manager devices relates to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to perform attacks by splitting HTTP responses using...

XSS in RSS Description Link

Description An Administrator can import a malicious RSS feed that contains Cross Site Scripting XSS payloads inside RSS links. Victims who wish to visit an RSS content and click on the link will execute the Javascript. Proof of Concept 1. Create a malicious RSS feeds The XSS payload is inside ite...

CVE-2022-41073

creationtimestamp| type| source ---|---|--- 2022-11-08 20:27:53+00:00| published-proof-of-concept| https://t.me/alexmakus/4847 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=913 2022-11-09 14:40:05+00:00| seen| https://t.me/truesecator/3680 2022-12-08...