Lucene search
+L

654 matches found

CNNVD
CNNVD
added 2025/06/06 12:00 a.m.9 views

WordPress plugin BRW 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.2AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.9 views

WordPress plugin WhatsApp Click to Chat Plugin for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00548EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:05 p.m.17 views

CVE-2025-39360

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in everestthemes Grace Mag grace-mag allows PHP Local File Inclusion.This issue affects Grace Mag: from n/a through = 1.1.5...

7.5CVSS7.2AI score0.00716EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/24 4:15 p.m.21 views

CVE-2025-39399

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ashraful Sarkar Naiem License For Envato license-envato allows PHP Local File Inclusion.This issue affects License For Envato: from n/a through = 1.0.0...

7.5CVSS0.00716EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/24 12:00 a.m.16 views

WordPress plugin Grace Mag 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00716EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.8 views

WordPress plugin Hotel Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.3AI score0.00636EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.10 views

WordPress plugin Széchenyi 2020 Logo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00676EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

WordPress plugin Eventin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00865EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.10 views

WordPress plugin Radius Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.9AI score0.00944EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.8 views

WordPress plugin Sparkle Elementor Kit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.9AI score0.01055EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.11 views

WordPress plugin Login Widget for Ultimate Member 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS8.5AI score0.00776EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.7 views

WordPress plugin WishSuite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.4AI score0.01069EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/26 12:00 a.m.5 views

WordPress plugin LinkedIn Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS8.8AI score0.01023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/26 12:00 a.m.8 views

WordPress plugin Pearl 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.8AI score0.01023EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 1:19 p.m.11 views

CVE-2024-7034

In open-webui version 0.3.8, the endpoint /models/upload is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of filepath = f"UPLOADDIR/file.filename" without proper input validation or sanitization. An attacker can...

7.2CVSS7.5AI score0.02458EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/25 12:00 a.m.5 views

WordPress plugin Funnel Builder by FunnelKit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS8.9AI score0.00784EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/25 12:00 a.m.7 views

WordPress plugin Eventin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.8AI score0.00743EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/25 12:00 a.m.9 views

PT-2025-7853 · Unknown · Quantumcloud Chatbot

Name of the Vulnerable Software and Affected Versions: QuantumCloud ChatBot versions n/a through 6.3.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local...

7.5CVSS9.6AI score0.00755EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/02/22 12:00 a.m.12 views

WordPress plugin Calculator Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS8.4AI score0.00595EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/07 12:00 a.m.8 views

PT-2025-5951 · Unknown · Fami Sales Popup

Name of the Vulnerable Software and Affected Versions: Fami Sales Popup versions through 2.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

7.5CVSS9.5AI score0.0069EPSS
SaveExploits0References5
Rows per page
Query Builder