Lucene search
+L

9421 matches found

CNNVD
CNNVD
added 2025/05/23 12:00 a.m.8 views

WordPress plugin miniOrange Discord Integration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.6AI score0.00636EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.10 views

WordPress plugin Backpack Traveler 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.7AI score0.00785EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/23 12:00 a.m.12 views

PT-2025-22692 · Unknown · Apustheme Butcher

Name of the Vulnerable Software and Affected Versions: ApusTheme Butcher versions n/a through 2.40 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

8.1CVSS8.1AI score0.00785EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.8 views

WordPress plugin SEUR Oficial 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.3AI score0.00762EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.9 views

WordPress plugin WordPress Social Login and Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

8.1CVSS7.6AI score0.00636EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.8 views

WordPress plugin WP Job Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.3AI score0.00686EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.5 views

WordPress plugin Fable Extra 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.6AI score0.00611EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.16 views

WordPress plugin Ads Pro Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS7.6AI score0.00785EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.12 views

WordPress plugin WP Smart Import 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.6AI score0.00706EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.9 views

WordPress plugin Wilmër 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.1CVSS7.7AI score0.00706EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.7 views

WordPress plugin Ogami 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS7.8AI score0.00785EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/23 12:00 a.m.8 views

WordPress plugin Healsoul 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS7.8AI score0.00785EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/23 12:00 a.m.10 views

PT-2025-22657 · Unknown · Fujian Kelixun

Name of the Vulnerable Software and Affected Versions: Fujian Kelixun version 1.0 Description: A critical issue has been found in the Filename Handler component, specifically affecting the /app/fax/fax view.php file. The manipulation of the fax file argument leads to os command injection, allowin...

7.5CVSS7.3AI score0.0207EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/05/22 11:49 p.m.13 views

CVE-2022-2261

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue...

7.2CVSS6.7AI score0.01398EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:42 p.m.8 views

CVE-2022-41231

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint...

5.7CVSS5.5AI score0.01323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:49 p.m.11 views

CVE-2022-30515

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...

5.3CVSS7.1AI score0.00676EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.12 views

CVE-2022-28913

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting...

10CVSS7.9AI score0.02565EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.11 views

CVE-2022-28911

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate...

10CVSS7.9AI score0.02565EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.14 views

CVE-2022-28912

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW...

10CVSS7.9AI score0.02565EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:42 p.m.11 views

CVE-2022-28658

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing...

5.5CVSS6.8AI score0.00204EPSS
SaveExploits0References1
Rows per page
Query Builder