Lucene search
K

304 matches found

NVD
NVD
added 2024/08/26 9:15 p.m.15 views

CVE-2024-43117

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...

8.8CVSS0.00198EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/26 8:50 p.m.19 views

CVE-2024-43117 WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...

4.3CVSS0.00198EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/26 8:50 p.m.14 views

CVE-2024-43117 WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.9.1...

4.3CVSS5.2AI score0.00198EPSS
Exploits0References1
CVE
CVE
added 2024/08/26 8:50 p.m.52 views

CVE-2024-43117

CVE-2024-43117 is a CSRF vulnerability in the WPMU DEV Hummingbird WordPress plugin, affecting Hummingbird releases up to 3.9.1. The provided documents confirm the issue and list a patched status, but there are no public details in the sources about the exact fix version or exploitation specifics...

8.8CVSS5.9AI score0.00198EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.1 views

WordPress plugin Hummingbird 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.6AI score0.00198EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/08/07 9:49 a.m.3 views

WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Hummingbird versions = 3.9.1...

8.8CVSS7AI score0.00535EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/07 9:48 a.m.4 views

WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Hummingbird versions = 3.9.1...

8.8CVSS7AI score0.00198EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/08/07 12:0 a.m.11 views

WordPress Hummingbird Plugin <= 3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hummingbird Type Plugin Vulnerable versions = 3.9.1 Fixed in 3.9.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43117 Patch priority Low CVSS severity Low 4.3 Developer WPMU DEV PSID 6f3eebbe9837 Credits Rafie Muhammad Patchstack...

8.8CVSS6.7AI score0.00198EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/08/07 12:0 a.m.8 views

WordPress Hummingbird Plugin <= 3.9.1 is vulnerable to Broken Access Control

Software Hummingbird Type Plugin Vulnerable versions = 3.9.1 Fixed in 3.9.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43118 Patch priority Low CVSS severity Low 4.3 Developer WPMU DEV PSID 908a6950528a Credits Rafie Muhammad Patchstack Required...

8.8CVSS6.3AI score0.00535EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/06/09 1:15 p.m.2 views

CVE-2024-32792

Missing Authorization vulnerability in WPMU DEV Hummingbird.This issue affects Hummingbird: from n/a through 3.7.3...

5.3CVSS5.8AI score0.00283EPSS
Exploits0References1
NVD
NVD
added 2024/06/09 1:15 p.m.16 views

CVE-2024-32792

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.7.3...

5.3CVSS0.00283EPSS
Exploits0References2
CVE
CVE
added 2024/06/09 12:57 p.m.59 views

CVE-2024-32792

CVE-2024-32792: Missing Authorization in WordPress WPMU DEV Hummingbird plugin (

5.3CVSS5.9AI score0.00283EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/06/09 12:57 p.m.25 views

CVE-2024-32792 WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.7.3...

4.3CVSS0.00283EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/09 12:57 p.m.20 views

CVE-2024-32792 WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through = 3.7.3...

4.3CVSS5.1AI score0.00283EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/09 12:0 a.m.3 views

WordPress plugin Hummingbird security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.7AI score0.00283EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.4 views

PT-2024-24865 · Wpmu Dev · Wpmu Dev Hummingbird

Name of the Vulnerable Software and Affected Versions: WPMU DEV Hummingbird versions 3.7.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPMU DEV Hummingbird. Recommendations: For WPMU DEV Hummingbird versions 3.7.3 and earlier, update to a version late...

5.3CVSS6.2AI score0.00283EPSS
Exploits0References7
Patchstack
Patchstack
added 2024/04/22 1:52 p.m.3 views

WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Hummingbird versions = 3.7.3...

5.3CVSS7AI score0.00283EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.10 views

WordPress Hummingbird Plugin <= 3.7.3 is vulnerable to Broken Access Control

Software Hummingbird Type Plugin Vulnerable versions = 3.7.3 Fixed in 3.7.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32792 Patch priority Low CVSS severity Low 4.3 Developer WPMU DEV PSID 9b701eb20e44 Credits Peng Zhou Required privilege...

5.3CVSS6.6AI score0.00283EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/11 12:0 a.m.14 views

WordPress Hummingbird Plugin < 3.4.2 is vulnerable to Path Traversal

Software Hummingbird Type Plugin Vulnerable versions 3.4.2 Fixed in 3.4.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Path Traversal CVE CVE-2023-1478 Patch priority High CVSS severity High 8.6 Developer WPMU DEV PSID 237afa7a6db1 Credits Karol Mazurek AFINE Required privilege...

9.8CVSS6.8AI score0.01128EPSS
Exploits2References4Affected Software1
OSV
OSV
added 2023/04/10 2:15 p.m.1 views

CVE-2023-1478

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module...

9.8CVSS7.3AI score
Exploits0References1
Rows per page
Query Builder