Lucene search
+L

226 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 5:13 a.m.•13 views

CVE-2023-41850

Cross-Site Request Forgery CSRF vulnerability in Morris Bryant, Ruben Sargsyan Outbound Link Manager plugin = 1.2 versions...

8.8CVSS7.1AI score0.00259EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:39 a.m.•14 views

CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

6.1CVSS6.1AI score0.00985EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:07 a.m.•22 views

CVE-2015-9453

The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist...

6.1CVSS6AI score0.01545EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:18 a.m.•19 views

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

9.8CVSS8.2AI score0.0239EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/13 8:56 a.m.•14 views

CVE-2025-31041

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.0.4...

7.5CVSS7.2AI score0.00573EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 8:42 a.m.•62 views

CVE-2025-31041

CVE-2025-31041 : The WordPress plugin AnyTrack Affiliate Link Manager is affected up to version 1.0.4 and suffers a Missing Authorization vulnerability. Public data shows a CVSSv3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges required, and no confiden...

7.5CVSS7.2AI score0.00573EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/11 8:42 a.m.•25 views

CVE-2025-31041 WordPress AnyTrack Affiliate Link Manager plugin <= 1.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.0.4...

7.5CVSS0.00573EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/11 8:42 a.m.•4 views

CVE-2025-31041 WordPress AnyTrack Affiliate Link Manager <= 1.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in NotFound AnyTrack Affiliate Link Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AnyTrack Affiliate Link Manager: from n/a through 1.0.4...

7.5CVSS6.9AI score0.00573EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•2 views

CVE-2025-31041: Missing Authorization

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.0.4...

7.5CVSS5.9AI score0.00573EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/11 12:00 a.m.•2 views

PT-2025-16045

Name of the Vulnerable Software and Affected Versions: AnyTrack Affiliate Link Manager versions 1.0.4 and earlier Description: The issue is related to a Missing Authorization vulnerability in AnyTrack Affiliate Link Manager, which allows exploiting incorrectly configured access control security...

7.5CVSS5.9AI score0.00573EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•12 views

WordPress plugin AnyTrack Affiliate Link Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.9AI score0.00573EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/04/09 5:45 p.m.•17 views

WordPress AnyTrack Affiliate Link Manager plugin <= 1.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by timomangcut in WordPress Plugin AnyTrack Affiliate Link Manager versions = 1.0.4...

7.5CVSS8.3AI score0.00573EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:25 a.m.•20 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS7.3AI score0.00384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:09 p.m.•21 views

CVE-2024-0715

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: before 8.8.7-03...

9.8CVSS7.4AI score0.00457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/29 12:00 a.m.•22 views

PT-2025-4061 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Stored Cross-Site Scripting via link titles due to...

6.4CVSS8.1AI score0.00254EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•6 views

CVE-2025-0804: Improper Neutralization of Input During Web Page Generation

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.9AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/11 3:15 a.m.•13 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS7.4AI score0.00352EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/11 12:00 a.m.•7 views

CVE-2024-11327: Improper Neutralization of Input During Web Page Generation

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS6AI score0.00352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•22 views

PT-2025-1637 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add...

6.1CVSS6.6AI score0.00352EPSS
SaveExploits0References8
OSV
OSV
•added 2025/01/07 11:15 a.m.•18 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages allows Blind SQL Injection.This issue affects ClickWhale – Link Manager, Link Shortener and...

8.5CVSS7.3AI score0.00384EPSS
SaveExploits0References1
Rows per page
Query Builder