Lucene search
+L

287 matches found

NVD
NVD
added 2025/02/18 5:15 a.m.18 views

CVE-2024-13725

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS0.01346EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/18 5:15 a.m.6 views

CVE-2024-13725

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS7.7AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/18 4:21 a.m.7 views

CVE-2024-13725 Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...

9.8CVSS7.8AI score0.01346EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.5 views

WordPress plugin Keap Official Opt-in Forms 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A path traversal vulnerability exists in WordPress...

9.8CVSS8.6AI score0.01346EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/17 9:53 p.m.6 views

WordPress Keap Official Opt-in Forms plugin <= 2.0.1 - Unauthenticated Limited Local File Inclusion vulnerability

Unauthenticated Limited Local File Inclusion vulnerability discovered by Hiroho Shimada in WordPress Plugin Keap Official Opt-in Forms versions = 2.0.1...

9.8CVSS7AI score0.01346EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/24 6:15 p.m.5 views

CVE-2025-24547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matthias.wagner Caching Compatible Cookie Opt-In and JavaScript caching-compatible-cookie-optin-and-javascript allows Stored XSS.This issue affects Caching Compatible Cookie Opt-In and JavaScript:...

6.5CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.5 views

CVE-2025-24547 WordPress Caching Compatible Cookie Opt-In plugin <= 0.0.10 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matthias.wagner Caching Compatible Cookie Opt-In and JavaScript caching-compatible-cookie-optin-and-javascript allows Stored XSS.This issue affects Caching Compatible Cookie Opt-In and JavaScript:...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/24 5:24 p.m.24 views

CVE-2025-24547 WordPress Caching Compatible Cookie Opt-In plugin <= 0.0.10 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in matthias.wagner Caching Compatible Cookie Opt-In and JavaScript caching-compatible-cookie-optin-and-javascript allows Stored XSS.This issue affects Caching Compatible Cookie Opt-In and JavaScript:...

6.5CVSS0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.9 views

WordPress Caching Compatible Cookie Opt-In plugin <= 0.0.10 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Caching Compatible Cookie Opt-In and JavaScript versions = 0.0.10...

6.5CVSS5.8AI score0.00354EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.8 views

PT-2025-5397 · Unknown · Caching Compatible Cookie Opt-In/Javascript

Name of the Vulnerable Software and Affected Versions: Caching Compatible Cookie Opt-In and JavaScript versions 0.0.0 through 0.0.10 Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS...

6.5CVSS5.3AI score0.00354EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/01/09 12:20 a.m.3 views

SUSE CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

3.3CVSS5.9AI score0.00284EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2025/01/07 4:15 p.m.5 views

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

3.3CVSS5.9AI score0.00284EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/07 4:15 p.m.3 views

CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability affects Firefox 134...

3.3CVSS6.7AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/07 4:15 p.m.6 views

UBUNTU-CVE-2025-0245

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability affects Firefox 134...

3.3CVSS5.8AI score0.00284EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/07 4:7 p.m.313 views

CVE-2025-0245

CVE-2025-0245 affects Firefox before version 134. The issue is that an opt-in authentication setting could be bypassed under certain circumstances, enabling local access without proper authentication and with user interaction required. Root cause details are not fully disclosed in the provided do...

3.3CVSS5.9AI score0.00284EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/07 4:7 p.m.26 views

CVE-2025-0245 Lock screen setting bypass in Firefox Focus for Android

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134...

0.00284EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.5 views

PT-2025-3810

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134 Description A user opt-in setting that requires authentication before using Focus could be bypassed under certain circumstances. Recommendations For versions prior to 134, update to a version that includes the fix...

9.8CVSS6.8AI score0.1307EPSS
SaveExploits1References320
Vulnrichment
Vulnrichment
added 2024/12/12 4:23 a.m.12 views

CVE-2024-10590 Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload

The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the adminupload function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS7.8AI score0.00811EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/12 4:23 a.m.206 views

CVE-2024-10590 Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload

The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the adminupload function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS0.00811EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/12/12 12:57 a.m.5 views

WordPress Opt-In Downloads plugin <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin Opt-In Downloads versions = 4.07...

8.8CVSS7AI score0.00811EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder