Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-45487

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00168EPSS
Exploits0References1
OSV
OSV
added 2025/03/07 9:15 a.m.2 views

CVE-2024-13904

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

9.1CVSS5.8AI score0.00458EPSS
Exploits0References3
NVD
NVD
added 2025/03/07 9:15 a.m.6 views

CVE-2024-13904

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

9.1CVSS0.00458EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/07 8:21 a.m.8 views

CVE-2024-13904 Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

5.3CVSS0.00458EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/07 8:21 a.m.7 views

CVE-2024-13904 Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

5.3CVSS7AI score0.00458EPSS
Exploits0References3
CVE
CVE
added 2025/03/07 8:21 a.m.42 views

CVE-2024-13904

CVE-2024-13904 – Platform.ly for WooCommerce (WordPress) is a confirmed SSRF vulnerability affecting all versions up to and including 1.1.6, exploitable by unauthenticated attackers via the plugin’s hooks function to make web requests from the WordPress environment to arbitrary locations, enablin...

9.1CVSS7AI score0.00458EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.2 views

WordPress plugin Platform.ly for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.1CVSS8.8AI score0.00458EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/03/06 11:22 p.m.2 views

WordPress Platform.ly for WooCommerce plugin <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery vulnerability

Unauthenticated Blind Server-Side Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Platform.ly for WooCommerce versions = 1.1.6...

9.1CVSS7.1AI score0.00458EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 3:24 a.m.4 views

CVE-2024-51687

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

7.1CVSS5.9AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2024/11/14 9:15 p.m.10 views

CVE-2024-51687

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

7.1CVSS0.00168EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/14 8:25 p.m.18 views

CVE-2024-51687 WordPress Platform.ly Official plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

7.1CVSS0.00168EPSS
Exploits0References1
CVE
CVE
added 2024/11/14 8:25 p.m.44 views

CVE-2024-51687

CVE-2024-51687 is a CSRF to Stored XSS vulnerability in WordPress Platform.Ly Official (versions up to 1.1.3). The issue can affect authenticated or unauthenticated users depending on context and has a high CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). The root cause is cross...

7.1CVSS5.9AI score0.00168EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/14 8:25 p.m.7 views

CVE-2024-51687 WordPress Platform.ly Official plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

7.1CVSS5.9AI score0.00168EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/01 12:0 a.m.6 views

WordPress Platform.ly Official Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Platform.ly Official Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.14 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51687 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8ba7cb51f2ab Credits SOPROBRO Requir...

7.1CVSS6.6AI score0.00168EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder