Lucene search
K

3946 matches found

NVD
NVD
added 2025/02/26 2:15 p.m.3 views

CVE-2025-26925

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.0016EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/26 1:21 p.m.10 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS0.0016EPSS
Exploits0References1
CVE
CVE
added 2025/02/26 1:21 p.m.56 views

CVE-2025-26925

CVE-2025-26925 is a CSRF vulnerability in the WordPress plugin Admin Menu Manager, affecting versions up to and including 1.0.3. The provided documents confirm the issue as a CSRF in Admin Menu Manager, but do not supply concrete exploitation details, affected product/version matrix beyond the 1....

4.3CVSS8.5AI score0.0016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/26 1:21 p.m.3 views

CVE-2025-26925 WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3...

4.3CVSS8.5AI score0.0016EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/26 1:17 p.m.2 views

WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Admin Menu Manager versions = 1.0.3...

4.3CVSS7AI score0.0016EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.2 views

WordPress plugin Admin Menu Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.3AI score0.0016EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/26 12:0 a.m.3 views

PT-2025-8693 · Unknown · Admin Menu Manager

Name of the Vulnerable Software and Affected Versions: Admin Menu Manager versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

4.3CVSS9.4AI score0.0016EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/24 4:0 a.m.22 views

CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...

4.8CVSS0.00285EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/22 12:36 a.m.13 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

5.4CVSS5.8AI score0.00314EPSS
Exploits2References4
Patchstack
Patchstack
added 2025/02/21 12:0 a.m.2 views

WordPress All In Menu Plugin <= 1.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin All In Menu versions = 1.1.5...

8.5CVSS8.1AI score0.00304EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/02/20 3:15 p.m.9 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

5.4CVSS0.00314EPSS
Exploits2References3
OSV
OSV
added 2025/02/20 10:15 a.m.1 views

CVE-2024-13792

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

9.8CVSS7.6AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/20 12:0 a.m.8 views

CVE-2025-25960

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

6.3AI score0.0026EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.2 views

WordPress plugin WooCommerce Food - Restaurant Menu & Food ordering 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the...

9.8CVSS9.3AI score0.00502EPSS
Exploits0References2
CVE
CVE
added 2025/02/20 12:0 a.m.45 views

CVE-2023-51312

CVE-2023-51312 affects PHPJabbers Restaurant Booking System v3.0, with a reflected Cross-Site Scripting (XSS) flaw in the Reservations menu and the Schedule date parameter. The underlying issue is untrusted input reflected in HTML/JavaScript contexts, enabling arbitrary script execution. Public e...

5.4CVSS5.3AI score0.00314EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2025/02/20 12:0 a.m.11 views

CVE-2023-51312

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting XSS in Reservations menu, Schedule section date parameter...

0.00314EPSS
Exploits2References2
Patchstack
Patchstack
added 2025/02/19 11:35 p.m.2 views

WordPress WooCommerce Food - Restaurant Menu & Food ordering plugin <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids vulnerability

WordPress WooCommerce Food - Restaurant Menu & Food ordering plugin = 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids vulnerability discovered by Lucio Sá in WordPress Plugin WooCommerce Food - Restaurant Menu & Food ordering versions = 3.3.2...

9.8CVSS7.2AI score0.00502EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/16 1:18 p.m.5 views

CVE-2025-24692

Missing Authorization vulnerability in M.Code Bulk Menu Edit bulk-menu-edit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Menu Edit: from n/a through = 1.3...

7.1CVSS7.2AI score0.00298EPSS
Exploits0References1
OSV
OSV
added 2025/02/16 1:15 a.m.2 views

CVE-2025-1332

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS3.6AI score0.00336EPSS
Exploits1References3
NVD
NVD
added 2025/02/16 1:15 a.m.35 views

CVE-2025-1332

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

4.8CVSS0.00336EPSS
Exploits1References3
Rows per page
Query Builder