Lucene search
+L

944 matches found

NVD
NVD
•added 2023/10/06 3:15 p.m.•39 views

CVE-2023-41650

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/06 3:15 p.m.•18 views

CVE-2023-41650

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

8.8CVSS7.3AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/06 3:15 p.m.•30 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

6.8CVSS8.8AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/06 2:33 p.m.•37 views

CVE-2023-41650 WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

4.3CVSS9AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/06 2:33 p.m.•78 views

CVE-2023-41650

CVE-2023-41650 describes a CSRF vulnerability in the WordPress plugin Remove/hide Author, Date, Category Like Entry-Meta (versions

8.8CVSS6.4AI score0.00253EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/06 2:33 p.m.•21 views

CVE-2023-41650 WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

4.3CVSS7.4AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/06 12:00 a.m.•2 views

CVE-2023-41650: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin = 2.1 versions...

8.8CVSS8.1AI score0.00253EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/10/04 11:16 a.m.•53 views

Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack

A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77, marking the first time a rogue package has delivered rootkit functionality. The package in question is node-hide-console-windows, which mimics the legitimate npm package...

7.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2023/09/29 12:00 a.m.•20 views

WordPress WP Hide Pages Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Hide Pages Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44232 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7c6152268ce5 Credits Nguyen Xuan Chien Require...

8.8CVSS6.6AI score0.00227EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/06 12:00 a.m.•21 views

PT-2023-31704

Name of the Vulnerable Software and Affected Versions Defender Security WordPress plugin versions prior to 4.1.0 Description The issue allows an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled, due to the plugin not preventing...

5.3CVSS6AI score0.02217EPSS
SaveExploits3References13
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/28 2:50 a.m.•8 views

Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/08/28 2:50 a.m.•15 views

MAL-2023-7938 Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
•added 2023/08/23 3:15 p.m.•43 views

CVE-2023-32505

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

5.9CVSS5.4AI score0.00396EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/23 3:15 p.m.•14 views

CVE-2023-32505

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

4.8CVSS7.3AI score0.00396EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/23 3:15 p.m.•25 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

4.3CVSS4.8AI score0.00396EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/23 2:22 p.m.•60 views

CVE-2023-32505 WordPress Easy Hide Login Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

5.9CVSS5.5AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/23 2:22 p.m.•71 views

CVE-2023-32505

CVE-2023-32505 — Auth. (admin+) Stored XSS in the WordPress plugin Easy Hide Login (Arshid Easy Hide Login)

5.9CVSS5AI score0.00396EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/23 2:22 p.m.•14 views

CVE-2023-32505 WordPress Easy Hide Login Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

5.9CVSS5.6AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/23 12:00 a.m.•33 views

WordPress plugin Easy Hide Login 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00396EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/23 12:00 a.m.•2 views

CVE-2023-32505: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

5.9CVSS5.6AI score0.00396EPSS
SaveExploits0References2
Rows per page
Query Builder