Lucene search
+L

35 matches found

CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin FloristPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00339EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/11 9:52 p.m.9 views

WordPress FloristPress plugin <= 7.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin FloristPress versions = 7.2.0...

7.1CVSS6.1AI score0.00339EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/09 1:15 p.m.20 views

CVE-2024-53798

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion.This issue affects FloristPress: from n/a through = 7.3.0...

5.4CVSS0.00348EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 12:56 p.m.30 views

CVE-2024-53798 WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion.This issue affects FloristPress: from n/a through = 7.3.0...

5.4CVSS0.00348EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 12:56 p.m.61 views

CVE-2024-53798

CVE-2024-53798 refers to a Missing Authorization vulnerability in the FloristPress WordPress plugin (FloristPress by BAKKBONE) affecting versions n/a through 7.3.0. Connected sources confirm a nonce leakage facilitating broken access control. The vulnerability is publicly tracked by CVE lists and...

5.4CVSS7.2AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

WordPress plugin FloristPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS8.3AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.11 views

PT-2024-35912 · Unknown · Floristpress

Name of the Vulnerable Software and Affected Versions: FloristPress versions n/a through 7.3.0 Description: The issue is related to a Missing Authorization vulnerability in FloristPress. Recommendations: For versions n/a through 7.3.0, update to a version that contains a fix for this issue,...

5.4CVSS6.8AI score0.00348EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/06 2:15 p.m.14 views

CVE-2024-53799

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through = 7.3.0...

4.3CVSS0.00384EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/06 1:07 p.m.65 views

CVE-2024-53799

CVE-2024-53799 concerns a missing/broken authorization vulnerability in the FloristPress WordPress plugin by BAKKBONE Australia, affecting versions up to and including 7.3.0. The issue stems from incorrectly configured access control, enabling unauthorized actions that could expose or manipulate ...

4.3CVSS7.2AI score0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/06 1:07 p.m.14 views

CVE-2024-53799 WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BAKKBONE Australia FloristPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.3.0...

4.3CVSS6.9AI score0.00384EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/06 1:07 p.m.50 views

CVE-2024-53799 WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through = 7.3.0...

4.3CVSS0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.11 views

WordPress plugin FloristPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.1AI score0.00384EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/06 12:00 a.m.9 views

PT-2024-35913 · Unknown · Floristpress

Name of the Vulnerable Software and Affected Versions: FloristPress versions 7.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For FloristPress versions 7.3....

4.3CVSS7AI score0.00384EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/02 11:15 a.m.12 views

WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin FloristPress versions = 7.3.0...

4.3CVSS7AI score0.00384EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/02 10:35 a.m.12 views

WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability

Nonce Leakage to Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin FloristPress versions = 7.3.0...

5.4CVSS7AI score0.00348EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder