Lucene search
+L

73 matches found

Patchstack
Patchstack
•added 2025/03/28 12:54 p.m.•23 views

WordPress Microblog Poster plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Microblog Poster versions = 2.1.6...

7.1CVSS8.4AI score0.00134EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/28 12:15 p.m.•35 views

CVE-2025-31435

Cross-Site Request Forgery CSRF vulnerability in Efficient Scripts Microblog Poster microblog-poster allows Stored XSS.This issue affects Microblog Poster: from n/a through = 2.1.6...

7.1CVSS0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 11:54 a.m.•43 views

CVE-2025-31435 WordPress Microblog Poster plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Efficient Scripts Microblog Poster microblog-poster allows Stored XSS.This issue affects Microblog Poster: from n/a through = 2.1.6...

7.1CVSS0.00134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•11 views

CVE-2025-31435: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Efficient Scripts Microblog Poster microblog-poster allows Stored XSS.This issue affects Microblog Poster: from n/a through = 2.1.6...

7.1CVSS8.6AI score0.00134EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•8 views

PT-2025-13480

Name of the Vulnerable Software and Affected Versions Efficient Scripts Microblog Poster versions 2.1.6 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations For versions 2.1.6 and earlier, update to a version that contains a...

7.1CVSS8.3AI score0.00134EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•21 views

WordPress plugin Microblog Poster has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8AI score0.00134EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/10/11 12:00 a.m.•14 views

WordPress microblog-poster plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. microblog-poster is a plugin used to automatically post web content to social media. A SQL injection vulnerability exists in the...

7.2CVSS8AI score0.01902EPSS
SaveExploits1References1
NVD
NVD
•added 2019/09/26 1:15 a.m.•28 views

CVE-2015-9449

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

7.2CVSS7.6AI score0.01902EPSS
SaveExploits1References3
Prion
Prion
•added 2019/09/26 1:15 a.m.•24 views

Sql injection

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

6.5CVSS8.6AI score0.01902EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2019/09/26 12:55 a.m.•13 views

CVE-2015-9449

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

8.6CVSS0.01902EPSS
SaveExploits1References3
CVE
CVE
•added 2019/09/26 12:55 a.m.•135 views

CVE-2015-9449

The CVE concerns the WordPress plugin Microblog Poster (versions before 1.6.2). A SQL Injection vulnerability exists in the plugin’s admin page (wp-admin/options-general.php?page=microblogposter.php account_id parameter) due to insufficient input validation. Public sources describe the issue as a...

7.2CVSS7.6AI score0.01902EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2019/09/26 12:00 a.m.•11 views

PT-2019-7408

Name of the Vulnerable Software and Affected Versions microblog-poster plugin versions prior to 1.6.2 Description The issue allows for SQL Injection via the account id parameter in the "wp-admin/options-general.php?page=microblogposter.php" API endpoint. Recommendations For versions prior to 1.6....

7.2CVSS0.01902EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/26 12:00 a.m.•16 views

CVE-2015-9449: Improper Neutralization of Special Elements used in an SQL Command

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

7.2CVSS7.1AI score0.01902EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/04/16 12:00 a.m.•38 views

Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2018-08255)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in Monstra CMS version 3.0.4. The vulnerability can be exploited ...

4.8CVSS6.5AI score0.02076EPSS
SaveExploits5References1
Drupal
Drupal
•added 2017/01/25 12:00 a.m.•24 views

Microblog - Critical - Unsupported - SA-CONTRIB-2017-007

This module enables microblogging on Drupal sites using it. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes. Versions affected All versions Drupal core is not affected. If you do not use the contributed microblog...

7.2AI score
SaveExploits0References9
Packet Storm
Packet Storm
•added 2016/10/13 12:00 a.m.•31 views

ApPHP MicroBlog 1.0.2 Cross Site Scripting

Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 Description : Vulnerable link :...

7.4AI score
SaveExploits0
zdt
zdt
•added 2016/10/12 12:00 a.m.•478 views

ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting

Exploit for php platform in category web applications Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 Descriptio...

7.1AI score
SaveExploits0
zdt
zdt
•added 2016/10/12 12:00 a.m.•108 views

ApPHP MicroBlog 1.0.2 - (Add New Author) Cross-Site Request Forgery

Exploit for php platform in category web applications Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2016/10/11 12:00 a.m.•29 views

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting

ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162...

6.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2016/10/11 12:00 a.m.•41 views

ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)

ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link :...

0.3AI score
SaveExploits0
Rows per page
Query Builder