Lucene search
+L

88 matches found

WPVulnDB
WPVulnDB
added 2024/04/03 12:0 a.m.13 views

WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.2 - Cross-Site Request Forgery

Description The WordPress Meta Data and Taxonomies Filter MDTF plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.3.1. This is due to missing or incorrect nonce validation on the changemetakey function. This makes it possible for unauthenticated...

8.8CVSS6.6AI score0.00241EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/01 12:0 a.m.20 views

WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The WordPress Meta Data and Taxonomies Filter MDTF plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/01 12:0 a.m.22 views

WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Description The WordPress Meta Data and Taxonomies Filter MDTF plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

7.1CVSS5.8AI score0.00421EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/01 12:0 a.m.15 views

WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The WordPress Meta Data and Taxonomies Filter MDTF plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.5CVSS5.8AI score0.00334EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/03/29 1:15 p.m.25 views

CVE-2024-30457

Cross-Site Request Forgery CSRF vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3.1...

8.8CVSS4.6AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/29 1:6 p.m.23 views

CVE-2024-30457 WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3.1...

4.3CVSS5AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 1:6 p.m.16 views

CVE-2024-30457 WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3.1...

4.3CVSS7AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 1:6 p.m.66 views

CVE-2024-30457

CVE-2024-30457 is described as a CSRF vulnerability in the MDTF (Meta Data and Taxonomies Filter) WordPress plugin. The vulnerability reportedly affects MDTF versions from a-n/a up to 1.3.3.1. The connected Red Hat entry reiterates the CSRF description for the same CVE, but there are no concrete ...

8.8CVSS8.6AI score0.00241EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/28 12:0 a.m.9 views

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Meta Data and Taxonomies Filter MDTF Type Plugin Vulnerable versions = 1.3.3.1 Fixed in 1.3.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-30457 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

8.8CVSS6.6AI score0.00241EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/03/27 2:15 p.m.13 views

CVE-2024-29763

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Reflected XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3...

7.1CVSS6.9AI score0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 1:11 p.m.84 views

CVE-2024-29763

Technical details for CVE-2024-29763 are not provided in the supplied documents. No vendor/product/version specifics or impact information are disclosed here. Monitor for official updates and additional disclosures.

7.1CVSS8.6AI score0.00421EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/27 1:11 p.m.14 views

CVE-2024-29763 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Reflected XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3...

7.1CVSS7AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 1:11 p.m.21 views

CVE-2024-29763 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Reflected XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/27 10:15 a.m.18 views

CVE-2024-29932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

6.5CVSS6.4AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 10:11 a.m.77 views

CVE-2024-29932

Technical details about CVE-2024-29932 are not publicly provided in the supplied documents. Monitor for official advisories and vendor patches to obtain affected products, vulnerable components, impact, and remediation when they become available.

6.5CVSS8.6AI score0.00351EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/27 10:11 a.m.15 views

CVE-2024-29932 WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

6.5CVSS7AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 6:53 a.m.31 views

CVE-2024-29906 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

5.9CVSS6.6AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 6:53 a.m.13 views

CVE-2024-29906 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

5.9CVSS8.6AI score0.00334EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 6:53 a.m.78 views

CVE-2024-29906

Technical details about CVE-2024-29906 are not provided in the connected documents. Public details appear limited to general description; monitor for updates from vendors/security researchers.

5.9CVSS8.6AI score0.00334EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.7 views

WordPress Plugin MDTF 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.5CVSS7AI score0.00334EPSS
SaveExploits0References2
Rows per page
Query Builder