Lucene search
+L

7048 matches found

Cvelist
Cvelist
added 2023/07/17 1:26 p.m.39 views

CVE-2023-35038 WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

5.4CVSS9AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/17 1:26 p.m.49 views

CVE-2023-35038

Summary (CVE-2023-35038) Cross-Site Request Forgery (CSRF) in the WordPress plugin WP PDF Generator (wpexperts.Io) versions

8.8CVSS7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/17 1:26 p.m.15 views

CVE-2023-35038 WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

5.4CVSS7.1AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/17 12:00 a.m.9 views

WordPress Plugin WP PDF Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. A cross-site request forgery...

8.8CVSS7.7AI score0.00248EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/07/17 12:00 a.m.24 views

WordPress Contact Form Generator Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form Generator Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.6.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-37988 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4da7e4864bf8 Credits Arvandy...

7.1CVSS5.6AI score0.01317EPSS
SaveExploits3References1Affected Software1
OSV
OSV
added 2023/07/14 6:08 p.m.10 views

MAL-2023-804 Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/14 6:08 p.m.8 views

Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/07/12 12:00 a.m.26 views

CentOS 8 : nodejs:18 (CESA-2023:4035)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:4035 advisory. - A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitra...

8.6CVSS6.8AI score0.01577EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2023/07/11 6:15 p.m.22 views

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS7.5AI score0.00847EPSS
SaveExploits0References4
NVD
NVD
added 2023/07/11 1:15 p.m.34 views

CVE-2023-25443

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

6.5CVSS5.2AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/11 1:15 p.m.13 views

CVE-2023-25443

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 1:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS6.6AI score0.0022EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/11 12:29 p.m.37 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS6.8AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 12:29 p.m.59 views

CVE-2023-25443

CVE-2023-25443 is a CSRF vulnerability in the WordPress Button Generator – easily Button Builder plugin, affecting versions

6.5CVSS5.5AI score0.0022EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 12:29 p.m.21 views

CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder plugin = 2.3.5 versions...

4.3CVSS7.1AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.9 views

WordPress Plugin Button Generator – easily Button Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Button Generator - easily...

6.5CVSS7AI score0.0022EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/10 4:15 p.m.7 views

CVE-2023-37392

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

8.8CVSS7.3AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.21 views

CVE-2023-37392

Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...

8.8CVSS6.5AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.36 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00998EPSS
SaveExploits2References1
OSV
OSV
added 2023/07/10 4:15 p.m.11 views

CVE-2023-1780

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score0.00998EPSS
SaveExploits2References1
Rows per page
Query Builder