Lucene search
+L

130 matches found

NVD
NVD
•added 2025/05/19 3:15 p.m.•21 views

CVE-2025-48285

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through = 1.3.61...

4.3CVSS0.00145EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/19 2:45 p.m.•47 views

CVE-2025-48285

CVE-2025-48285 concerns Falang multilanguage for WordPress (versions <= 1.3.61). The vulnerability is a Cross-Site Request Forgery (CSRF) scenario, with a CVSS3.1 score of 4.3 (Medium) and no confidentiality impact, partial integrity impact, and no availability impact per the provided metrics....

4.3CVSS5.9AI score0.00145EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/19 2:45 p.m.•4 views

CVE-2025-48285 WordPress Falang multilanguage <= 1.3.61 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage allows Cross Site Request Forgery. This issue affects Falang multilanguage: from n/a through 1.3.61...

4.3CVSS4.7AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/19 2:45 p.m.•23 views

CVE-2025-48285 WordPress Falang multilanguage plugin <= 1.3.61 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through = 1.3.61...

4.3CVSS0.00145EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•3 views

CVE-2025-48285: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through = 1.3.61...

4.3CVSS5.8AI score0.00145EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•11 views

WordPress plugin Falang multilanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS4.9AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:26 p.m.•11 views

CVE-2025-47524

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multilanguage allows Stored XSS.This issue affects Quran multilanguage Text & Audio: from n/a through = 2.3.23...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•57 views

CVE-2025-47524

CVE-2025-47524 describes a stored XSS in the WordPress plugin Quran multilanguage Text & Audio. The vulnerability stems from improper neutralization of user input during web page generation, allowing stored cross-site scripting across affected pages. The entry covers versions n/a through 2.3.23, ...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•5 views

CVE-2025-47524 WordPress Quran multilanguage Text & Audio plugin <= 2.3.23 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multilanguage allows Stored XSS.This issue affects Quran multilanguage Text & Audio: from n/a through = 2.3.23...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/07 12:37 p.m.•13 views

WordPress Quran multilanguage Text & Audio plugin <= 2.3.23 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Quran multilanguage Text & Audio versions = 2.3.23...

5.9CVSS7.1AI score0.00275EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•9 views

WordPress plugin Quran multilanguage Text & Audio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin...

5.9CVSS6.1AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•3 views

CVE-2025-47524: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multilanguage allows Stored XSS.This issue affects Quran multilanguage Text & Audio: from n/a through = 2.3.23...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 12:00 p.m.•6 views

CVE-2024-37240 WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through 1.3.51...

4.3CVSS7.2AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:00 p.m.•22 views

CVE-2024-37240 WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through = 1.3.51...

4.3CVSS0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•10 views

WordPress plugin Falang multilanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.00195EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•1 views

CVE-2024-37240: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through = 1.3.51...

4.3CVSS5.8AI score0.00195EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 3:53 p.m.•17 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS8.6AI score0.00409EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•1 views

CVE-2024-55999: Missing Authorization

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS5.8AI score0.00409EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•2 views

CVE-2024-11973: Improper Neutralization of Input During Web Page Generation

The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sourate' and 'lang' parameter in all versions up to, and including, 2.3.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6AI score0.00362EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•13 views

PT-2024-17376 · WordPress · Quran Multilanguage Text & Audio

Name of the Vulnerable Software and Affected Versions: The Quran multilanguage Text & Audio plugin for WordPress versions prior to 2.3.22 Description: The issue is related to Reflected Cross-Site Scripting via the sourate and lang parameters due to insufficient input sanitization and output...

6.1CVSS6.8AI score0.00362EPSS
SaveExploits0References8
Rows per page
Query Builder