Lucene search
+L

676 matches found

Vulnrichment
Vulnrichment
•added 2024/03/29 1:49 p.m.•24 views

CVE-2024-30491 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

8.5CVSS8.8AI score0.32049EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 1:49 p.m.•91 views

CVE-2024-30491

CVE-2024-30491 affects ProfileGrid (WordPress plugin) up to version 5.7.8. The issue is an SQL Injection flaw in ProfileGrid’s handling of input, enabling unauthenticated access to potentially exposed data (root cause: improper neutralization of input in SQL commands). Wordfence and RH advisories...

8.8CVSS8.9AI score0.32049EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/29 1:47 p.m.•25 views

CVE-2024-30490 WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

9.3CVSS8.9AI score0.02248EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/29 1:47 p.m.•121 views

CVE-2024-30490

CVE-2024-30490 affects the WordPress ProfileGrid plugin (versions through 5.7.8). The root cause is SQL Injection from insufficient escaping of the user-supplied ‘search’ parameter, leading to arbitrary SQL execution. Public descriptions from connected sources confirm the plugin versions affected...

9.8CVSS8.9AI score0.02248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/29 1:47 p.m.•45 views

CVE-2024-30490 WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

9.3CVSS9.8AI score0.02248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•3 views

CVE-2024-30490: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

9.8CVSS5.8AI score0.02248EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•4 views

CVE-2024-30513: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS5.8AI score0.00455EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•17 views

WordPress Plugin ProfileGrid 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.5CVSS7.9AI score0.00455EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•17 views

PT-2024-23441 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid. Recommendations: For versions through 5.7.2, update to a version lat...

6.5CVSS9.3AI score0.00455EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•17 views

WordPress Plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

8.8CVSS8.8AI score0.32049EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•3 views

CVE-2024-30491: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

8.8CVSS5.8AI score0.32049EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•15 views

PT-2024-23416

Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

9.8CVSS9.1AI score0.02248EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•15 views

WordPress Plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS8.7AI score0.02248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•19 views

PT-2024-23417 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

8.8CVSS9.7AI score0.32049EPSS
SaveExploits0References5
OSV
OSV
•added 2024/03/28 5:15 a.m.•17 views

CVE-2024-30241

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...

8.8CVSS5.8AI score0.00858EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/28 5:15 a.m.•31 views

CVE-2024-30241

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...

8.8CVSS8.9AI score0.00858EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/28 4:36 a.m.•34 views

CVE-2024-30241 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...

8.5CVSS9AI score0.00858EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/28 4:36 a.m.•24 views

CVE-2024-30241 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...

8.5CVSS5.6AI score0.00858EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 4:36 a.m.•87 views

CVE-2024-30241

CVE-2024-30241 is an SQL Injection in ProfileGrid (WordPress plugin) affecting ProfileGrid versions through 5.7.1. Exploitation requires at least Contributor+ access (authenticated). A fix is available in 5.7.2 (and later); update to a patched release to mitigate. Other connected sources corrobor...

8.8CVSS5.6AI score0.00858EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•20 views

WordPress Plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

8.8CVSS7.7AI score0.00858EPSS
SaveExploits0References2
Rows per page
Query Builder