Lucene search
+L

70 matches found

RedhatCVE
RedhatCVE
•added 2026/01/01 3:32 p.m.•17 views

CVE-2025-59136

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial woo-gerencianet-official allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through = 3.1.3...

5.3CVSS5.9AI score0.00669EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 4:15 p.m.•36 views

CVE-2025-59136

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial woo-gerencianet-official allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through = 3.1.3...

5.3CVSS0.00669EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:24 p.m.•38 views

CVE-2025-59136 WordPress Gerencianet Oficial plugin <= 3.1.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial woo-gerencianet-official allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through = 3.1.3...

5.3CVSS0.00669EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 3:24 p.m.•35 views

CVE-2025-59136

CVE-2025-59136 affects Efí Bank – Gerencianet Oficial (WordPress/WooCommerce plugin). Issue: Insertion of Sensitive Information Into Sent Data, causing exposure of embedded sensitive data. Root cause: mis-handling of data during transmission from Efí Bank to Gerencianet Oficial. Affected versions...

5.3CVSS5.8AI score0.00669EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 3:24 p.m.•11 views

CVE-2025-59136 WordPress Gerencianet Oficial plugin <= 3.1.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through 3.1.3...

5.3CVSS5.8AI score0.00669EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:24 p.m.•20 views

EUVD-2025-206031

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through 3.1.3...

5.3CVSS6.4AI score0.00669EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/31 3:20 p.m.•18 views

WordPress Gerencianet Oficial plugin <= 3.1.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin Gerencianet Oficial versions = 3.1.3...

5.3CVSS6.8AI score0.00669EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•15 views

WordPress plugin Gerencianet Oficial 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00669EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•5 views

CVE-2025-59136: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Efí Bank Gerencianet Oficial woo-gerencianet-official allows Retrieve Embedded Sensitive Data.This issue affects Gerencianet Oficial: from n/a through = 3.1.3...

5.3CVSS5.8AI score0.00669EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•30 views

PT-2025-54357

Name of the Vulnerable Software and Affected Versions Efí Bank Gerencianet Oficial versions through 3.1.3 Description An issue exists in Efí Bank Gerencianet Oficial that allows retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Upda...

5.3CVSS6.3AI score0.00669EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/25 1:19 p.m.•10 views

CVE-2025-46474

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File Inclusion.This issue affects SEUR Oficial: from n/a through = 2.2.23...

8.1CVSS7.2AI score0.00762EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/23 1:15 p.m.•16 views

CVE-2025-46474

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File Inclusion.This issue affects SEUR Oficial: from n/a through = 2.2.23...

8.1CVSS0.00762EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/23 12:43 p.m.•5 views

CVE-2025-46474 WordPress SEUR Oficial <= 2.2.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial allows PHP Local File Inclusion. This issue affects SEUR Oficial: from n/a through 2.2.23...

8.1CVSS8.3AI score0.00762EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/23 12:43 p.m.•28 views

CVE-2025-46474 WordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File Inclusion.This issue affects SEUR Oficial: from n/a through = 2.2.23...

8.1CVSS0.00762EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/23 12:43 p.m.•58 views

CVE-2025-46474

CVE-2025-46474 = Unauthenticated Local File Inclusion in WordPress SEUR Oficial plugin

8.1CVSS7.2AI score0.00762EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:13 a.m.•20 views

CVE-2024-9438

The SEUR Oficial plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'changeservice' parameter in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6.4AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:40 a.m.•19 views

CVE-2023-0331

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server...

7.5CVSS7.7AI score0.00849EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/05/23 12:00 a.m.•16 views

PT-2025-22731 · Unknown · Seur Oficial

Name of the Vulnerable Software and Affected Versions: SEUR Oficial versions n/a through 2.2.23 Description: The issue affects SEUR Oficial due to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Local File Inclusion...

8.1CVSS8.7AI score0.00762EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/23 12:00 a.m.•14 views

WordPress plugin SEUR Oficial 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.3AI score0.00762EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•8 views

CVE-2025-46474: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File Inclusion.This issue affects SEUR Oficial: from n/a through = 2.2.23...

8.1CVSS5.8AI score0.00762EPSS
SaveExploits0References1
Rows per page
Query Builder