Lucene search
+L

2229 matches found

Patchstack
Patchstack
•added 2025/05/13 11:08 p.m.•20 views

WordPress Ninja Forms Webhooks plugin <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook vulnerability

Authenticated Admin+ Server-Side Request Forgery via Form Webhook vulnerability discovered by Francesco Carlucci in WordPress Plugin Ninja Forms Webhooks versions = 3.0.7...

5.5CVSS8.4AI score0.00253EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:29 p.m.•34 views

CVE-2025-32269

Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...

4.3CVSS7.2AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•27 views

CVE-2025-32269

Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...

4.3CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•38 views

CVE-2025-32269 WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...

4.3CVSS0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•20 views

WordPress plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6AI score0.00191EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•10 views

CVE-2025-32269: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 4:21 p.m.•25 views

CVE-2025-31884

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP CMS Ninja Norse Rune Oracle Plugin norse-runes-oracle allows Stored XSS.This issue affects Norse Rune Oracle Plugin: from n/a through = 1.4.3...

6.5CVSS7.2AI score0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 3:16 p.m.•50 views

CVE-2025-31884

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP CMS Ninja Norse Rune Oracle Plugin norse-runes-oracle allows Stored XSS.This issue affects Norse Rune Oracle Plugin: from n/a through = 1.4.3...

6.5CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 2:52 p.m.•76 views

CVE-2025-31884

CVE-2025-31884 affects the Norse Rune Oracle Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin, with affected versions from unknown (n/a) up to 1.4.3. Root cause: improper neutralization of input during web page generation. Impact (as stated): potential ...

6.5CVSS7.2AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 11:33 p.m.•33 views

CVE-2025-31092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...

6.5CVSS7.2AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 12:10 p.m.•34 views

CVE-2025-30863

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and Contact Form 7,...

4.3CVSS7.2AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/28 12:15 a.m.•29 views

CVE-2025-31092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...

6.5CVSS0.00207EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•10 views

CVE-2025-31092: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ninja Team Click to Chat – WP Support All-in-One Floating Widget support-chat allows Stored XSS.This issue affects Click to Chat – WP Support All-in-One Floating Widget: from n/a through = 2.3.4...

6.5CVSS5.8AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 11:21 p.m.•87 views

CVE-2025-31092

CVE-2025-31092: Stored XSS in Click to Chat – WP Support All-in-One Floating Widget due to improper input neutralization during web page generation; affected plugin versions up to 2.3.4 (no details on fixes in provided documents).

6.5CVSS7.2AI score0.00207EPSS
SaveExploits0References1
Circl
Circl
•added 2025/03/27 2:04 p.m.•24 views

CVE-2016-3177

creationtimestamp| type| source ---|---|--- 2025-03-27 14:04:29+00:00| seen| https://www.thezdi.com/blog/2025/3/20/mindshare-using-binary-ninja-api-to-detect-potential-use-after-free-vulnerabilities...

9.8CVSS6.9AI score0.01631EPSS
SaveExploits0References1
Circl
Circl
•added 2025/03/27 2:04 p.m.•15 views

CVE-2015-5221

creationtimestamp| type| source ---|---|--- 2025-03-27 14:04:29+00:00| seen| https://www.thezdi.com/blog/2025/3/20/mindshare-using-binary-ninja-api-to-detect-potential-use-after-free-vulnerabilities...

5.5CVSS6.7AI score0.0219EPSS
SaveExploits0References1
Circl
Circl
•added 2025/03/27 2:04 p.m.•35 views

CVE-2015-5177

creationtimestamp| type| source ---|---|--- 2025-03-27 14:04:29+00:00| seen| https://www.thezdi.com/blog/2025/3/20/mindshare-using-binary-ninja-api-to-detect-potential-use-after-free-vulnerabilities...

7.5CVSS6.8AI score0.0631EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/27 11:15 a.m.•24 views

CVE-2025-30863

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and Contact Form 7,...

4.3CVSS0.00213EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/27 11:08 a.m.•15 views

WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms versions = 1.0.9...

4.3CVSS7AI score0.00213EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2025/03/27 10:55 a.m.•63 views

CVE-2025-30863

CVE-2025-30863 is a CSRF vulnerability in theIntegration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin. Affected is the plugin “Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms” with versions up to 1.0.9 (inclusive). The issue is a C...

4.3CVSS7.2AI score0.00213EPSS
SaveExploits0References1
Rows per page
Query Builder