Lucene search
K

37 matches found

Cvelist
Cvelist
added 2025/06/06 12:53 p.m.14 views

CVE-2025-49307 WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magazine3 WP Multilang wp-multilang allows PHP Local File Inclusion.This issue affects WP Multilang: from n/a through = 2.4.19...

7.5CVSS0.00491EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.2 views

WordPress plugin WP Multilang 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.2AI score0.00491EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.2 views

PT-2025-24235 · WordPress · Magazine3 Wp Multilang

Name of the Vulnerable Software and Affected Versions: Magazine3 WP Multilang versions through 2.4.19 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

7.5CVSS7.4AI score0.00491EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/12 12:0 a.m.2 views

Multilang Contact Form Plugin for WordPress Cross-Site Scripting

The WordPress Multilang Contact Form Plugin installed on the remote host is affected by a Cross-Site Scripting XSS vulnerability. Note that the scanner has not tester for these issues but has instead relied only the application's self-reported version number. No source data...

7.1CVSS6.4AI score0.00261EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/06 2:21 a.m.3 views

CVE-2025-22795

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...

7.1CVSS7.2AI score0.00261EPSS
Exploits0References1
NVD
NVD
added 2025/01/15 4:15 p.m.11 views

CVE-2025-22795

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...

7.1CVSS0.00261EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.14 views

CVE-2025-22795 WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...

7.1CVSS0.00261EPSS
Exploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.54 views

CVE-2025-22795

CVE-2025-22795 affects WordPress Multilang Contact Form plugin versions n/a through 1.5. The vulnerability is a Reflected XSS caused by improper neutralization of input during web page generation. Remediation guidance across sources is to update to a version later than 1.5 (i.e., &gt;1.5). Practi...

7.1CVSS7.2AI score0.00261EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.4 views

WordPress plugin Multilang Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

7.1CVSS7.4AI score0.00261EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/13 5:44 p.m.3 views

WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Multilang Contact Form versions = 1.5...

7.1CVSS6.1AI score0.00261EPSS
Exploits0Affected Software1
OSV
OSV
added 2019/08/05 1:15 p.m.2 views

CVE-2016-10772

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin SEC-168...

3.3CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2019/08/05 1:15 p.m.14 views

Code injection

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin SEC-168...

2.1CVSS7.1AI score0.00342EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/05 12:55 p.m.45 views

CVE-2016-10772

CVEs surrounding cPanel 2016-10772 : The vulnerability affects cPanel before 60.0.25, where the system does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168). Multiple connected sources (Red Hat CVE entry, CNVD-2019-29623, NVD entry) reiterate the same descriptio...

3.3CVSS4.3AI score0.00342EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/08/02 4:15 p.m.4 views

CVE-2017-18434

cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...

7.8CVSS6.1AI score0.00455EPSS
Exploits0References2
Prion
Prion
added 2019/08/02 4:15 p.m.16 views

Code injection

cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...

7.2CVSS7.8AI score0.00455EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/02 3:59 p.m.25 views

CVE-2017-18434

cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...

7.8AI score0.00455EPSS
Exploits0References1
hackapp
hackapp
added 2016/04/01 10:0 a.m.12 views

HANGMAN FREE (multilang) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HANGMAN FREE multilang published at the 'play' market has multiple vulnerabilities...

0.6AI score
Exploits0References1Affected Software1
Rows per page
Query Builder