Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-12328

Malware in sbrugna...

3.3CVSS4.3AI score0.00065EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/08 10:29 p.m.4 views

WordPress WP-Members Membership Plugin plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution via Profile Names vulnerability discovered by Kishan Vyas in WordPress Plugin WP-Members versions = 3.5.4.2...

5CVSS6.9AI score0.00097EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/06/20 3:15 p.m.4 views

CVE-2025-50051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chad Butler WP-Members wp-members allows Stored XSS.This issue affects WP-Members: from n/a through = 3.5.4...

6.5CVSS0.00143EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:25 p.m.2 views

CVE-2021-25343

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 in Android O8.1 and below and 3.8.00.13 in Android P9.0 and above allows unauthorized actions including denial of service attack by hijacking the provider...

4CVSS6.8AI score0.00054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/03 7:11 a.m.13 views

CVE-2025-3521

The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping. This makes i...

6.4CVSS7.4AI score0.00163EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:46 p.m.11 views

CVE-2025-32686 WordPress Team Members plugin <= 3.4.4 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in WPSpeedo Team Members wps-team allows Object Injection.This issue affects Team Members: from n/a through = 3.4.4...

8.8CVSS0.00233EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:46 p.m.40 views

CVE-2025-32686

CVE-2025-32686: Deserialization of untrusted data leading to PHP object injection in the WP Speedo Team Members plugin. Affected software: Team Members versions up to 3.4.0 (n/a through 3.4.0). Impact is described as Deserialization of Untrusted Data enabling Object Injection; CVSSv3.1 base score...

8.8CVSS7.2AI score0.00233EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.2 views

Live Membership System 安全漏洞

Live Membership System is a live membership system by rashmi mishra individual developer. A security vulnerability exists in Live Membership System v1.0, which stems from a cross-site request forgery CSRF vulnerability found in /deletemembers.php...

8.8CVSS6.7AI score0.00423EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/11/09 12:0 a.m.2 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in craftmembers. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...

6.5CVSS6.8AI score0.00038EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/06/07 6:21 p.m.15 views

CVE-2022-30748

Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...

4CVSS5.8AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2021/03/04 9:3 p.m.68 views

CVE-2021-25343

The CVE-2021-25343 issue affects Samsung Members on Android O (8.1) and below, and Android P (9.0) and above, where calling a non-existent provider can enable unauthorized actions including denial of service by hijacking the provider. Affected versions are prior to 2.4.81.13 for Android O–era dev...

4CVSS4.1AI score0.00054EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder