Lucene search
+L

6949 matches found

Patchstack
Patchstack
added 2022/02/28 12:00 a.m.13 views

WordPress SV Posts plugin < 1.8.03 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SV Posts plugin versions 1.8.03. Solution Update the WordPress SV Posts plugin to the latest available version at least 1.8.03...

1.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.9 views

WordPress WPTools Masonry Gallery & Posts For Divi plugin < 3.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPTools Masonry Gallery & Posts For Divi plugin versions 3.1.2. Solution Update the WordPress WPTools Masonry Gallery & Posts For Divi plugin to the latest available version at least 3.1.2...

2.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.12 views

WordPress Content Slider for WP Posts (Section Slider) plugin <= 0.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Content Slider for WP Posts Section Slider plugin versions = 0.0.0. Solution No patched version available...

3.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.16 views

WordPress Mass Pages/Posts Creator plugin <= 2.1.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mass Pages/Posts Creator plugin versions = 2.1.4. Solution Update the WordPress Mass Pages/Posts Creator plugin to the latest available version at least 2.1.5...

2.2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.15 views

WordPress Delete old Posts automatically plugin <= 2.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Delete old Posts automatically plugin versions = 2.0.2. Solution Update the WordPress Delete old Posts automatically plugin to the latest available version at least 2.1.2...

4.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.10 views

WordPress Widgets on Pages and Posts plugin <= 1.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Widgets on Pages and Posts plugin versions = 1.4.0. Solution No patched version available...

2.3AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.13 views

WordPress Content Slider for WP Posts (Section Slider) plugin <= 0.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Content Slider for WP Posts Section Slider plugin versions = 0.0.0. Solution No patched version available...

1.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.16 views

WordPress Tabs with Recommended Posts (Widget) plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Tabs with Recommended Posts Widget plugin versions = 1.0.0. Solution No patched version available...

4.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.16 views

WordPress WPTools Masonry Gallery & Posts For Divi plugin < 3.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPTools Masonry Gallery & Posts For Divi plugin versions 3.1.2. Solution Update the WordPress WPTools Masonry Gallery & Posts For Divi plugin to the latest available version at least 3.1.2...

2.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.14 views

WordPress SV Posts plugin < 1.8.03 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Posts plugin versions 1.8.03. Solution Update the WordPress SV Posts plugin to the latest available version at least 1.8.03...

3.6AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.15 views

WordPress "ACF Frontend – Add and edit posts, pages, users and more all from the frontend" plugin < 3.3.33 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "ACF Frontend – Add and edit posts, pages, users and more all from the frontend" plugin versions 3.3.33. Solution Update the WordPress "ACF Frontend – Add and edit posts, pages, users and more all from the frontend" plugin to...

1.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.16 views

WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin < 2.1.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin versions 2.1.7. Solution Update the WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin t...

3.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.15 views

WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin <= 1.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin versions = 1.1.2. Solution Update the WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin to the latest available versio...

1.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.12 views

WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin < 2.1.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin versions 2.1.7. Solution Update the WordPress Posts List Designer by Category – List Category Posts Or Recent Posts plugin to the latest available...

2.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.15 views

WordPress Delete Duplicate Posts plugin < 4.7.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Delete Duplicate Posts plugin versions 4.7.6. Solution Update the WordPress Delete Duplicate Posts plugin to the latest available version at least 4.7.6...

1.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.14 views

WordPress WordPress Editable Posts Table for the Frontend plugin < 2.4.15 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Editable Posts Table for the Frontend plugin versions 2.4.15. Solution Update the WordPress WordPress Editable Posts Table for the Frontend plugin to the latest available version at least 2.4.15...

1.8AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:00 a.m.14 views

The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.

The vulnerability of the editposts permission implementation in the PHP plugin for PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely using metashells...

9.9CVSS8.3AI score0.0165EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:00 a.m.14 views

The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.

The vulnerability of the editposts permission implementation in the PHP plugin for PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using Götterhuber blocks...

9.9CVSS8.3AI score0.026EPSS
SaveExploits3References4Affected Software1
NVD
NVD
added 2022/02/16 5:15 p.m.35 views

CVE-2022-24664

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

9.9CVSS0.0165EPSS
SaveExploits2References1
WPVulnDB
WPVulnDB
added 2022/02/08 12:00 a.m.29 views

PHP Everywhere < 3.0.0 - Contributor+ RCE via Metabox

The plugin allows any users with a role as low as contributor to execute PHP via the Metabox of the plugin in posts...

9.9CVSS5.5AI score0.0165EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder