Lucene search
+L

371 matches found

Vulnrichment
Vulnrichment
•added 2024/05/17 6:30 a.m.•21 views

CVE-2023-23645 WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2...

9.9CVSS7.1AI score0.00983EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•15 views

WordPress plugin MainWP Code Snippets Extension 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

9.9CVSS7.7AI score0.00983EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•4 views

CVE-2023-23645: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2...

9.9CVSS5.8AI score0.00983EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•27 views

PT-2024-11989

Name of the Vulnerable Software and Affected Versions MainWP Code Snippets Extension versions n/a through 4.0.2 Description The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability in the MainWP Code Snippets Extension, allowing Code Injection. This...

9.9CVSS5.5AI score0.00983EPSS
SaveExploits0References8
OSV
OSV
•added 2024/04/26 11:15 a.m.•17 views

CVE-2024-33680

Cross-Site Request Forgery CSRF vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1...

5.4CVSS5.8AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 11:15 a.m.•22 views

CVE-2024-33680

Cross-Site Request Forgery CSRF vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1...

5.4CVSS5.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/26 10:37 a.m.•88 views

CVE-2024-33680

CVE-2024-33680 is a CSRF vulnerability affecting the WordPress plugin MainWP Child Reports up to version 2.1.1. The connected Red Hat advisory confirms the issue as a CSRF vulnerability in MainWP Child Reports; no public details on root cause specifics beyond CSRF, affected versions, or any avail...

5.4CVSS5.1AI score0.00197EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/26 10:37 a.m.•21 views

CVE-2024-33680 WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1...

5.4CVSS7AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/26 10:37 a.m.•33 views

CVE-2024-33680 WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1...

5.4CVSS5.7AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/26 7:52 a.m.•22 views

WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Brandon Roldan Patchstack Alliance in WordPress Plugin MainWP Child Reports versions = 2.1.1...

5.4CVSS7AI score0.00197EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•1 views

CVE-2024-33680: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1...

5.4CVSS5.8AI score0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•20 views

WordPress plugin MainWP Child Reports 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS6.4AI score0.00197EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/26 12:00 a.m.•23 views

WordPress MainWP Child Reports Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software MainWP Child Reports Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-33680 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2150654abae2 Credits Brandon Roldan...

5.4CVSS6.6AI score0.00197EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/04/08 5:18 a.m.•11 views

WordPress WPvivid Backup for MainWP plugin <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Khayal Farzaliyev shaman0x01 in WordPress Plugin WPvivid Backup for MainWP versions = 0.9.33...

5.7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/04/08 12:00 a.m.•7 views

WordPress WPvivid Backup for MainWP Plugin <= 0.9.33 is vulnerable to Cross Site Scripting (XSS)

Software WPvivid Backup for MainWP Type Plugin Vulnerable versions = 0.9.33 Fixed in 0.9.34 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d8f7ae025718 Credits Khayal Farzaliyev...

6AI score
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/03/28 7:15 a.m.•30 views

CVE-2023-23649

Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1...

8.1CVSS8.1AI score0.0075EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/28 6:12 a.m.•37 views

CVE-2023-23649 WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1...

8.1CVSS8.3AI score0.0075EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/28 6:12 a.m.•16 views

CVE-2023-23649 WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1...

8.1CVSS5.2AI score0.0075EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 6:12 a.m.•84 views

CVE-2023-23649

CVE-2023-23649 affects the WordPress plugin MainWP Links Manager Extension, vulnerable versions

8.1CVSS5.2AI score0.0075EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•3 views

CVE-2023-23649: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1...

8.1CVSS5.8AI score0.0075EPSS
SaveExploits0References2
Rows per page
Query Builder