Lucene search
+L

18060 matches found

Vulnrichment
Vulnrichment
•added 2025/05/07 2:19 p.m.•11 views

CVE-2025-47490 WordPress Ultimate WP Mail <= 1.3.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rustaurius Ultimate WP Mail allows SQL Injection. This issue affects Ultimate WP Mail: from n/a through 1.3.4...

8.5CVSS8.8AI score0.00335EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:19 p.m.•76 views

CVE-2025-47490

CVE-2025-47490 is a WordPress vulnerability in the Ultimate WP Mail plugin (versions up to 1.3.4) causing SQL Injection due to improper neutralization of input in SQL commands. Documented references show the issue affects Ultimate WP Mail

8.5CVSS7.3AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:19 p.m.•32 views

CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

5.4CVSS0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:19 p.m.•6 views

CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

5.4CVSS8.5AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:19 p.m.•58 views

CVE-2025-47466

CVE-2025-47466 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Ultimate WP Mail . Affected versions are listed as from n/a through 1.3.4 . The vulnerability is CSRF-based and the public details in the connected sources indicate no explicit exploit vectors beyon...

5.4CVSS7.2AI score0.0016EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/07 12:32 p.m.•18 views

WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Aiden Thái An in WordPress Plugin Ultimate WP Mail versions = 1.3.4...

8.5CVSS8.8AI score0.00335EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/05/07 10:52 a.m.•23 views

WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Denver Jackson in WordPress Plugin Mail Mint versions = 1.17.7...

7.5CVSS8.2AI score0.00472EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•15 views

PT-2025-20097 · WordPress · Rustaurius Ultimate Wp Mail

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate WP Mail versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Rustaurius...

5.4CVSS6.3AI score0.0016EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•20 views

PT-2025-20116 · Unknown · Rustaurius Ultimate Wp Mail

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate WP Mail versions 1.3.4 and below Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized access and enables...

8.5CVSS9.3AI score0.00335EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•11 views

WordPress plugin Ultimate WP Mail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.3AI score0.0016EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•23 views

WordPress plugin Ultimate WP Mail SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS8.9AI score0.00335EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•4 views

CVE-2025-47466: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

5.4CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•7 views

CVE-2025-47490: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows SQL Injection.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...

8.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/05/07 12:00 a.m.•19 views

CommuniGate Pro Code Execution

The vulnerability of the CommuniGate Pro mail server is related to errors in eliminating special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS5.9AI score
SaveExploits0Affected Software1
AlmaLinux
AlmaLinux
•added 2025/05/05 12:00 a.m.•30 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in Firefox Updater CVE-2025-2817 firefox: thunderbird: Unsafe attribute access during XPath parsing CVE-2025-4087 firefox: thunderbird: Process isolation bypass using...

9.1CVSS10AI score0.00656EPSS
SaveExploits0References12
Fedora
Fedora
•added 2025/05/03 2:10 a.m.•20 views

[SECURITY] Fedora 42 Update: thunderbird-128.10.0-1.fc42

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2025/05/02 2:03 a.m.•12 views

[SECURITY] Fedora 41 Update: thunderbird-128.10.0-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2025/05/01 2:07 a.m.•26 views

[SECURITY] Fedora 42 Update: thunderbird-128.9.2-1.fc42

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/05/01 12:00 a.m.•34 views

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

0.0028EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/01 12:00 a.m.•3 views

CVE-2024-48906: Improper Neutralization of Input During Web Page Generation

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

6.1CVSS5.7AI score0.0028EPSS
SaveExploits1References1
Rows per page
Query Builder