Lucene search
+L

6 matches found

Patchstack
Patchstack
•added 2026/10/03 9:37 a.m.•1 views

WordPress No External Links plugin <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Afifudin Maarif in WordPress Plugin Mihdan: No External Links versions = 5.2.0...

7.2CVSS5.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/09/22 7:41 p.m.•20 views

WordPress Mihdan: No External Links Plugin <= 5.1.6.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Bao BlueRock in WordPress Plugin Mihdan: No External Links versions = 5.1.6.2...

5.4CVSS6.6AI score0.00169EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•7 views

CVE-2025-53451: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in mihdan Mihdan: No External Links mihdan-no-external-links allows Cross Site Request Forgery.This issue affects Mihdan: No External Links: from n/a through = 5.1.6.2...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•24 views

PT-2025-38988

Name of the Vulnerable Software and Affected Versions Mihdan: No External Links versions through 5.1.4 Description A Cross-Site Request Forgery CSRF issue exists in Mihdan: No External Links. This allows attackers to perform actions on behalf of unsuspecting users. Recommendations Update to a...

5.4CVSS6.6AI score0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•6 views

CVE-2022-1095: Improper Neutralization of Input During Web Page Generation

The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00588EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/06/27 12:00 a.m.•15 views

WordPress plugin Mihdan: No External Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Mihdan: No External Links plugin 4.8.0 and earlier versions are vulnerable to a cross-site scriptin...

4.8CVSS5.4AI score0.00588EPSS
SaveExploits2References2
Rows per page
Query Builder