Lucene search
K

6 matches found

Cvelist
Cvelist
added 2025/12/31 1:55 p.m.21 views

CVE-2025-62120 WordPress OpenHook plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rick Beckman OpenHook thesis-openhook allows Cross Site Request Forgery.This issue affects OpenHook: from n/a through = 4.3.1...

5.4CVSS0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-57532

Malicious code in bioql PyPI...

9.9CVSS8.7AI score0.07003EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:43 a.m.2 views

CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the php shortcode setting to be...

9.9CVSS6.1AI score0.07003EPSS
Exploits0References1
OSV
OSV
added 2023/09/30 3:15 a.m.0 views

CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the php shortcode setting to be...

8.8CVSS7.5AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/09/30 2:33 a.m.0 views

CVE-2023-5201 OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the php shortcode setting to be...

9.9CVSS7.4AI score0.07003EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2023/09/29 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-5201

The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server. This requires the php shortcode setting to...

9.9CVSS7.6AI score0.07003EPSS
Exploits0References1
Rows per page
Query Builder