Lucene search
+L

753 matches found

Cvelist
Cvelist
added 2026/05/10 12:12 p.m.37 views

CVE-2022-50955 WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery

WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious requests. Attackers can trick authenticated administrators into submitting forged requests to the options-general.php page...

5.3CVSS0.0013EPSS
SaveExploits0References3
CVE
CVE
added 2026/05/10 12:12 p.m.13 views

CVE-2022-50955

CVE-2022-50955 affects the WordPress plugin Curtain 1.0.2. The issue is a cross-site request forgery (CSRF) that lets attackers toggle maintenance mode by crafting requests to options-general.php with curtain parameters, bypassing valid nonce validation. Impact is the ability to activate/deactiva...

5.3CVSS5.7AI score0.0013EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.11 views

WordPress plugin Curtain 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.7AI score0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.16 views

PT-2026-39480

WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious requests. Attackers can trick authenticated administrators into submitting forged requests to the options-general.php page...

5.3CVSS5.7AI score0.0013EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.4 views

Cisco IOS XE Software DoS (cisco-sa-iosxe-mntc-dos-LZweQcyq)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because...

6.5CVSS8.6AI score0.00092EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.7 views

CVE-2026-39464

Server-Side Request Forgery SSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through = 6.19.8...

5.5CVSS5.8AI score0.00186EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/13 6:30 a.m.5 views

EUVD-2026-21866

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

6.8CVSS5.8AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/13 6:16 a.m.12 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

6.8CVSS0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/13 5:4 a.m.44 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/13 5:4 a.m.4 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 5:4 a.m.3 views

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/13 5:4 a.m.12 views

CVE-2026-21011

CVE-2026-21011 describes an incorrect privilege assignment in Bluetooth when in Maintenance mode, prior to the SMR Apr-2026 Release 1. This flaw could allow a physical attacker to bypass Extend Unlock. The reporting sources (NVD and CVE feeds) confirm the description and note a Samsung security u...

6.8CVSS5.8AI score0.00149EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.15 views

PT-2026-32269

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.7 views

CVE-2026-39464

Server-Side Request Forgery SSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through = 6.19.8...

5.5CVSS0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.23 views

CVE-2026-39464 WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through = 6.19.8...

5.5CVSS0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.13 views

PT-2026-31113

Server-Side Request Forgery SSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through = 6.19.8...

5.9AI score0.00186EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/07 9:16 a.m.8 views

CVE-2026-34896

Cross-Site Request Forgery CSRF vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1...

7.5CVSS0.00122EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/07 8:20 a.m.22 views

CVE-2026-34896

CVE-2026-34896 concerns the WordPress plugin “Under Construction, Coming Soon & Maintenance Mode” (versions up to 2.1.1). The connected Patchstack entry confirms a Cross-Site Request Forgery (CSRF) vulnerability in this plugin, indicating the issue arises in affected versions

7.5CVSS5.9AI score0.00122EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/07 8:20 a.m.8 views

EUVD-2026-19590

Cross-Site Request Forgery CSRF vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1...

7.5CVSS5.9AI score0.00122EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 8:20 a.m.11 views

CVE-2026-34896

Cross-Site Request Forgery CSRF vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1...

7.5CVSS5.9AI score0.00122EPSS
SaveExploits0References2
Rows per page
Query Builder