Lucene search
+L

22 matches found

NVD
NVD
•added 2026/06/17 1:19 p.m.•21 views

CVE-2024-35690

Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/a through 4.0.1...

6.5CVSS0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2024-35690: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/a through 4.0.1...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•34 views

PT-2026-50371

Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/a through 4.0.1...

6.5CVSS5.2AI score0.00294EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/28 5:51 p.m.•19 views

WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Discussion Board versions = 2.5.7...

4.3CVSS6.7AI score0.00181EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-2895

Malicious code in bioql PyPI...

9.9CVSS8.7AI score0.01138EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-53017

Malicious code in bioql PyPI...

4.3CVSS8.6AI score0.0034EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-40469

Malicious code in bioql PyPI...

8.1CVSS8.6AI score0.00434EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:55 a.m.•13 views

CVE-2024-56219

Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through = 4.0.6.1...

4.3CVSS7.2AI score0.0034EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:04 a.m.•16 views

CVE-2023-36520

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12...

8.1CVSS8.2AI score0.00434EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/16 7:17 a.m.•35 views

CVE-2025-22630

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Marketing Fire Widget Options widget-options allows OS Command Injection.This issue affects Widget Options: from n/a through = 4.1.0...

9.9CVSS7.2AI score0.01138EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/14 7:15 a.m.•29 views

CVE-2025-22630

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Marketing Fire Widget Options widget-options allows OS Command Injection.This issue affects Widget Options: from n/a through = 4.1.0...

9.9CVSS0.01138EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/14 7:10 a.m.•100 views

CVE-2025-22630

CVE-2025-22630 concerns the WordPress plugin Widget Options. The vulnerability is a Command Injection (improper neutralization of special elements) that allows OS Command Injection and potentially Arbitrary Code Execution. Affected software: Widget Options versions

9.9CVSS7.2AI score0.01138EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•22 views

PT-2025-6951 · Unknown · Marketingfire Widget Options

Name of the Vulnerable Software and Affected Versions: MarketingFire Widget Options versions n/a through 4.1.0 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability, in MarketingFire Widget Options...

9.9CVSS9.7AI score0.01138EPSS
SaveExploits0References8
NVD
NVD
•added 2024/12/31 11:15 a.m.•19 views

CVE-2024-56219

Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through = 4.0.6.1...

4.3CVSS0.0034EPSS
SaveExploits0References1
Prion
Prion
•added 2024/12/31 11:15 a.m.•25 views

CVE-2024-56219

Missing Authorization vulnerability in MarketingFire Widget Options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through 4.0.6.1...

0.0034EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/20 3:15 p.m.•18 views

CVE-2023-36520

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/20 3:15 p.m.•35 views

CVE-2023-36520

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12...

8.1CVSS0.00434EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/20 3:15 p.m.•42 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12...

5.5CVSS7.2AI score0.00434EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/20 2:18 p.m.•83 views

CVE-2023-36520

CVE-2023-36520 affects the WordPress Editorial Calendar plugin up to version 3.7.12. Affected: Editorial Calendar plugin for WordPress. What’s at issue: Insecure Direct Object References (IDOR) enabling an authorization bypass via a user-controlled key, as documented by Patchstack and CVE records...

8.1CVSS8.2AI score0.00434EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/20 2:18 p.m.•53 views

CVE-2023-36520 WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12...

5.4CVSS8.3AI score0.00434EPSS
SaveExploits0References1
Rows per page
Query Builder