Lucene search
+L

26046 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•11 views

CVE-2025-32275: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

5.3CVSS8.5AI score0.00324EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/10 12:00 a.m.•9 views

PT-2025-15961

Name of the Vulnerable Software and Affected Versions: Ays Pro Survey Maker versions n/d through 5.1.5.4 Description: The issue allows identity spoofing due to an authentication bypass by spoofing vulnerability. Recommendations: For versions n/d through 5.1.5.4, update to a version later than...

5.3CVSS8.4AI score0.00324EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/04/09 8:15 p.m.•18 views

CVE-2025-26901

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS8.5AI score0.00354EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/09 8:15 p.m.•23 views

CVE-2025-26902

Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS8.4AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 8:15 p.m.•47 views

CVE-2025-26902

Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS0.00175EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 8:15 p.m.•37 views

CVE-2025-26901

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 7:30 p.m.•51 views

CVE-2025-26902 WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...

4.3CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 7:30 p.m.•94 views

CVE-2025-26902

CVE-2025-26902: Cross-Site Request Forgery in Brizy Pro. Affected: Brizy Pro up to and including 2.6.1. Description specifies CSRF vulnerability; no details on root cause beyond CSRF, no exploit specifics or affected actions beyond the vulnerability type. Connected sources corroborate the CVEID a...

8.8CVSS8.4AI score0.00175EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/09 7:30 p.m.•17 views

CVE-2025-26902 WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...

4.3CVSS8.4AI score0.00175EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/09 7:29 p.m.•25 views

WordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Brizy Pro versions = 2.6.1...

8.8CVSS8.4AI score0.00175EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2025/04/09 7:28 p.m.•45 views

CVE-2025-26901 WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

4.3CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 7:28 p.m.•85 views

CVE-2025-26901

CVE-2025-26901 (Brizy Pro) is a Missing Authorization vulnerability affecting Brizy Pro versions up to 2.6.1, per Wordfence coverage referencing the Brizy Pro entry. The issue stems from incorrectly configured access control security levels, enabling unauthorized actions without authentication or...

8.8CVSS8.5AI score0.00354EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/09 7:28 p.m.•11 views

CVE-2025-26901 WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

4.3CVSS8.5AI score0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/09 7:25 p.m.•23 views

WordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Brizy Pro versions = 2.6.1...

8.8CVSS8.4AI score0.00354EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/04/09 5:15 p.m.•34 views

CVE-2025-32659

Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Stored XSS.This issue affects FraudLabs Pro for WooCommerce: from n/a through = 2.22.8...

7.1CVSS0.00173EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•43 views

CVE-2025-32659 WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Stored XSS.This issue affects FraudLabs Pro for WooCommerce: from n/a through = 2.22.8...

7.1CVSS0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•91 views

CVE-2025-32659

CVE-2025-32659 is a FraudLabs Pro for WooCommerce vulnerability: a CSRF to Stored XSS affecting the FraudLabs Pro for WooCommerce product (affected versions include up to v2.22.7 per initial description; Wordfence references a fix in v2.22.8). Exploitation would enable attacker-supplied scripts t...

7.1CVSS8.4AI score0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 4:09 p.m.•14 views

CVE-2025-32659 WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fraudlabspro FraudLabs Pro for WooCommerce allows Stored XSS. This issue affects FraudLabs Pro for WooCommerce: from n/a through 2.22.7...

7.1CVSS8.4AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•8 views

CVE-2025-26902: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Brizy Brizy Pro allows Cross Site Request Forgery.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS8.5AI score0.00175EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•8 views

CVE-2025-26901: Missing Authorization

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

8.8CVSS8.7AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder