Lucene search
+L

32 matches found

NVD
NVD
•added 2025/05/16 4:15 p.m.•28 views

CVE-2025-32310

Cross-Site Request Forgery CSRF vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quickcal allows Privilege Escalation.This issue affects QuickCal - Appointment Booking Calendar for WordPress: from n/a through = 1.0.15...

8.8CVSS0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/16 3:45 p.m.•12 views

CVE-2025-32299 WordPress QuickCal <= 1.0.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themovation QuickCal allows Retrieve Embedded Sensitive Data. This issue affects QuickCal: from n/a through 1.0.15...

4.3CVSS6.8AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/16 3:45 p.m.•32 views

CVE-2025-32299 WordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themovation QuickCal - Appointment Booking Calendar for WordPress quickcal allows Retrieve Embedded Sensitive Data.This issue affects QuickCal - Appointment Booking Calendar for WordPress: from n/a through...

4.3CVSS0.00336EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/16 3:45 p.m.•37 views

CVE-2025-32299

CVE-2025-32299 affects WordPress plugin QuickCal (Themovation) for versions up to 1.0.15, exposing sensitive system information to an unauthorized control sphere and enabling retrieval of embedded sensitive data. Public sources consistently describe the vulnerability as a data-exposure issue in Q...

4.3CVSS7.2AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/16 3:45 p.m.•46 views

CVE-2025-32310

The CVE-2025-32310 entry concerns a Cross-Site Request Forgery (CSRF) vulnerability in ThemeMove QuickCal that enables privilege escalation in QuickCal versions up to 1.0.13. The vulnerability is supported by multiple sources, including PT-2025-21694 which states ThemeMove QuickCal versions 1.0.1...

8.8CVSS7.2AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/16 3:45 p.m.•15 views

CVE-2025-32310 WordPress QuickCal plugin <= 1.0.13 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeMove QuickCal allows Privilege Escalation. This issue affects QuickCal: from n/a through 1.0.13...

8.8CVSS7AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/16 3:45 p.m.•32 views

CVE-2025-32310 WordPress QuickCal plugin <= 1.0.15 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quickcal allows Privilege Escalation.This issue affects QuickCal - Appointment Booking Calendar for WordPress: from n/a through = 1.0.15...

8.8CVSS0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•15 views

WordPress plugin QuickCal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS5.8AI score0.00336EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•1 views

CVE-2025-32299: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themovation QuickCal - Appointment Booking Calendar for WordPress quickcal allows Retrieve Embedded Sensitive Data.This issue affects QuickCal - Appointment Booking Calendar for WordPress: from n/a through...

4.3CVSS5.8AI score0.00336EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•21 views

PT-2025-21694 · Thememove · Thememove Quickcal

Name of the Vulnerable Software and Affected Versions: ThemeMove QuickCal versions 1.0.13 and earlier Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application...

8.8CVSS9AI score0.00241EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•12 views

WordPress plugin QuickCal 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

8.8CVSS8.6AI score0.00241EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•4 views

CVE-2025-32310: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quickcal allows Privilege Escalation.This issue affects QuickCal - Appointment Booking Calendar for WordPress: from n/a through = 1.0.15...

8.8CVSS5.8AI score0.00241EPSS
SaveExploits0References1
Rows per page
Query Builder