Lucene search
+L

54 matches found

CVE
CVE
added 2023/07/25 12:57 p.m.39 views

CVE-2023-35043

CVE-2023-35043 corresponds to an unauthenticated stored XSS in the WordPress plugin Neha Goel Recent Posts Slider , affected versions

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.6 views

PT-2023-25112 · WordPress · Neha Goel Recent Posts Slider

Name of the Vulnerable Software and Affected Versions: Neha Goel Recent Posts Slider plugin versions = 1.1 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be stored on the server and executed when a user accesses...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/25 12:0 a.m.6 views

WordPress plugin Recent Posts Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/11 12:15 p.m.5 views

CVE-2023-35778

Cross-Site Request Forgery CSRF vulnerability in Neha Goel Recent Posts Slider plugin = 1.1 versions...

6.5CVSS7.3AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 11:11 a.m.47 views

CVE-2023-35778

CVE-2023-35778 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Recent Posts Slider (

6.5CVSS5.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.7 views

WordPress Plugin Recent Posts Slider 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.5CVSS6.9AI score0.0022EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/06/16 12:0 a.m.15 views

WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Recent Posts Slider Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-35778 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2c02326de32e Credits LEE SE HYOUNG...

6.5CVSS6.5AI score0.0022EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/06/13 12:0 a.m.13 views

WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Recent Posts Slider Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35043 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cce446409bae Credits LEE SE HYOUNG...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1Affected Software1
zdt
zdt
added 2014/06/27 12:0 a.m.55 views

Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution Exploit

Exploit for php platform in category web applications | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2014/06/24 12:0 a.m.215 views

Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code Execution

| | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components Exploit Author : @u0x Pichaya Morimoto Release dates :...

6.8CVSS5.2AI score0.0975EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2011/02/26 12:0 a.m.26 views

WordPress IGIT Posts Slider Widget 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress IGIT Posts Slider Widget 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://www.hackingethics.com/blog/wordpress-plugins/igit-posts-slider-widget/...

SaveExploits0
exploitpack
exploitpack
added 2011/02/23 12:0 a.m.14 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker m...

6.7AI score
SaveExploits0
Patchstack
Patchstack
added 2011/02/23 12:0 a.m.18 views

WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting

IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

2.3AI score
SaveExploits0References1Affected Software1
Exploit DB
Exploit DB
added 2011/02/23 12:0 a.m.21 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

5.3AI score
SaveExploits0
Rows per page
Query Builder