Lucene search
+L

7037 matches found

NVD
NVD
added 2025/01/24 6:15 p.m.43 views

CVE-2025-24713

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder button-generation allows Cross Site Request Forgery.This issue affects Button Generator – easily Button Builder: from n/a through = 3.1.1...

5.4CVSS0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 5:25 p.m.29 views

CVE-2025-24713 WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder button-generation allows Cross Site Request Forgery.This issue affects Button Generator – easily Button Builder: from n/a through = 3.1.1...

5.4CVSS0.00207EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.8 views

WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin Button Generator – easily Button Builder versions = 3.1.1...

5.4CVSS7AI score0.00207EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.14 views

PT-2025-5527 · Unknown · Button Generator

Name of the Vulnerable Software and Affected Versions: Button Generator – easily Button Builder versions n/a through 3.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing...

5.4CVSS6.8AI score0.00207EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.8 views

WordPress plugin Button Generator – easily Button Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Button Generator - easily...

5.4CVSS8.2AI score0.00207EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/20 3:43 p.m.72 views

CVE-2025-23044

PwnDoc (pwndoc) is affected by a CSRF vulnerability due to missing protection and SameSite cookies, enabling cross-site requests on behalf of authenticated users. The issue is associated with the project commit 14acb704891245bf1703ce6296d62112e85aa995, which patches the vulnerability. Public desc...

8.1CVSS6.6AI score0.00248EPSS
SaveExploits1References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/20 7:27 a.m.4 views

Malicious code in random-generator-decimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7a591cc5e685966c005b17774bc77fb8a5d268a3b8591b783932b1fb446341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/01/20 7:27 a.m.4 views

MAL-2025-236 Malicious code in random-generator-decimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7a591cc5e685966c005b17774bc77fb8a5d268a3b8591b783932b1fb446341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2025/01/16 9:15 p.m.30 views

CVE-2025-23954

Missing Authorization vulnerability in awcode Salvador – AI Image Generator salvador-ai-image-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador – AI Image Generator: from n/a through = 1.0.11...

4.3CVSS0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/16 9:15 p.m.7 views

CVE-2025-23831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

6.5CVSS0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:8 p.m.10 views

CVE-2025-23954 WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in awcode Salvador – AI Image Generator salvador-ai-image-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador – AI Image Generator: from n/a through = 1.0.11...

4.3CVSS7.2AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.23 views

CVE-2025-23864 WordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Luke America WCS QR Code Generator wcs-qr-code-generator allows Stored XSS.This issue affects WCS QR Code Generator: from n/a through = 1.0...

6.5CVSS0.00371EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:7 p.m.51 views

CVE-2025-23864

CVE-2025-23864 is a Stored XSS in WP Code Snippets WCS QR Code Generator (WordPress plugin) with vulnerable versions up to 1.0. Root cause: Improper input neutralization during web page generation. CVSSv3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L, base 6.5 (Medium). Connected Red Hat entry confirms ...

6.5CVSS7.2AI score0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.8 views

CVE-2025-23864 WordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Luke America WCS QR Code Generator wcs-qr-code-generator allows Stored XSS.This issue affects WCS QR Code Generator: from n/a through = 1.0...

6.5CVSS7.2AI score0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.3 views

CVE-2025-23831 WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

6.5CVSS7.2AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.20 views

CVE-2025-23831 WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

6.5CVSS0.00371EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/16 8:7 p.m.47 views

CVE-2025-23831

CVE-2025-23831 describes a DOM-based XSS in the QR Code Generator (René Hermenau) via improper neutralization of input during web page generation. Affected: WordPress QR Code Generator plugin, version range from n/a through 1.2.6. Impact stated in sources as Cross-site Scripting (stored in Wordfe...

6.5CVSS7.2AI score0.00371EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:43 p.m.11 views

WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Salvador – AI Image Generator versions = 1.0.11...

4.3CVSS7AI score0.00254EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.7 views

WordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WCS QR Code Generator versions = 1.0...

6.5CVSS5.9AI score0.00371EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.7 views

WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin QR Code Generator versions = 1.2.6...

6.5CVSS6.2AI score0.00371EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder