Lucene search
+L

568 matches found

Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•28 views

CVE-2025-47664 WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

4.4CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•15 views

CVE-2025-47664 WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

4.4CVSS4.8AI score0.00224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•17 views

PT-2025-20214

Name of the Vulnerable Software and Affected Versions ThimPress WP Pipes versions 1.4.2 and earlier Description The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform unauthorized actions on the server. This can lead to various security issues, includin...

6.5CVSS5.7AI score0.00224EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•19 views

WordPress plugin WP Pipes 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

6.5CVSS6.2AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•2 views

CVE-2025-47664: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/01 3:15 p.m.•5 views

DEBIAN-CVE-2022-49767

In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: always use ONONBLOCK read/write syzbot is reporting hung task at p9fdclose 1, for p9muxpollstop from p9conndestroy from p9fdclose is failing to interrupt already started kernelread from p9fdread from p9readwork and/or...

5.5CVSS5.6AI score0.00204EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/01 3:15 p.m.•15 views

UBUNTU-CVE-2022-49767

In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: always use ONONBLOCK read/write syzbot is reporting hung task at p9fdclose 1, for p9muxpollstop from p9conndestroy from p9fdclose is failing to interrupt already started kernelread from p9fdread from p9readwork and/or...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•11 views

SUSE CVE-2022-49151

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: properly check endpoint type Syzbot reported warning in usbsubmiturb which is caused by wrong endpoint type. We should check that in endpoint is actually present to prevent this warning. Found pipes are now saved to...

5.5CVSS6.1AI score0.00269EPSS
SaveExploits0References10
OSV
OSV
•added 2025/02/26 7:00 a.m.•12 views

UBUNTU-CVE-2022-49151

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: properly check endpoint type Syzbot reported warning in usbsubmiturb which is caused by wrong endpoint type. We should check that in endpoint is actually present to prevent this warning. Found pipes are now saved to...

5.5CVSS6.2AI score0.00269EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2025/02/05 10:25 p.m.•20 views

CVE-2022-45355

Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...

8.2CVSS8AI score0.00628EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:47 a.m.•10 views

CVE-2024-27308

Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some...

7.5CVSS7.5AI score0.00889EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•18 views

Fortinet FortiClientWindows 安全漏洞

Fortinet FortiClientWindows is a Windows-based mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exis...

3.3CVSS6.7AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/11 9:15 a.m.•33 views

CVE-2024-12283

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.0037EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/11 8:57 a.m.•79 views

CVE-2024-12283

CVE-2024-12283 refers to the WP Pipes plugin for WordPress. It allows a Reflected Cross-Site Scripting (XSS) via the x1 parameter in all versions up to and including 1.4.1 due to insufficient input sanitization and output escaping. The vulnerability is exploitable by unauthenticated attackers who...

6.1CVSS6.4AI score0.0037EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/11 8:57 a.m.•17 views

CVE-2024-12283 WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS6.4AI score0.0037EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/11 8:57 a.m.•33 views

CVE-2024-12283 WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•23 views

PT-2024-17526

Name of the Vulnerable Software and Affected Versions WP Pipes plugin for WordPress versions up to, and including, 1.4.1 Description The issue is related to Reflected Cross-Site Scripting via the x1 parameter due to insufficient input sanitization and output escaping. This allows unauthenticated...

6.1CVSS6.8AI score0.0037EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•23 views

WordPress plugin WP Pipes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.1CVSS8AI score0.0037EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/11 12:00 a.m.•4 views

CVE-2024-12283: Improper Neutralization of Input During Web Page Generation

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS6AI score0.0037EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/10 11:58 p.m.•16 views

WordPress WP Pipes plugin <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter vulnerability

Reflected Cross-Site Scripting via x1 Parameter vulnerability discovered by vgo0 in WordPress Plugin WP Pipes versions = 1.4.1...

6.1CVSS6.3AI score0.0037EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder