Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.1 views

CVE-2023-32587

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

8.8CVSS8.5AI score0.00053EPSS
Exploits0References1
OSV
OSV
added 2023/11/09 10:15 p.m.0 views

CVE-2023-32587

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

8.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/11/09 10:15 p.m.8 views

CVE-2023-32587

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

8.8CVSS0.00053EPSS
Exploits0References1
Prion
Prion
added 2023/11/09 10:15 p.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

6.8CVSS7.2AI score0.00053EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/09 9:14 p.m.15 views

CVE-2023-32587 WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Reactions, LLC WP Reactions Lite plugin = 1.3.8 versions...

5.4CVSS9AI score0.00053EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/09 12:0 a.m.1 views

WordPress Plugin WP Reactions Lite Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.5AI score0.00053EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/09 12:0 a.m.4 views

PT-2023-23891 · WordPress · Wp Reactions Lite

Name of the Vulnerable Software and Affected Versions: WP Reactions Lite plugin versions 1.3.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Reactions Lite plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For WP...

8.8CVSS8.9AI score0.00053EPSS
Exploits0References5
Patchstack
Patchstack
added 2023/05/11 12:0 a.m.9 views

WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Reactions Lite Type Plugin Vulnerable versions = 1.3.8 Fixed in 1.3.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32587 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b436a9de7ad3 Credits István Márton...

8.8CVSS7AI score0.00053EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/11/04 12:0 a.m.18 views

WordPress WP Reactions Lite plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Reactions Lite plugin prior to 1.3.6. The vulnerability stems from a failure to properly clean up input on the wp-admin...

5.4CVSS1.5AI score0.00197EPSS
Exploits2References1
OSV
OSV
added 2021/11/01 9:15 a.m.1 views

CVE-2021-24723

The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...

5.4CVSS5.8AI score0.00197EPSS
Exploits2References1
Prion
Prion
added 2021/11/01 9:15 a.m.10 views

Design/Logic Flaw

The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages...

3.5CVSS5.2AI score0.00197EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2021/11/01 8:46 a.m.37 views

CVE-2021-24723

CVE-2021-24723 concerns the WordPress WP Reactions Lite plugin prior to 1.3.6, where input sanitization failures in wp-admin pages allow an authenticated user to inject XSS payloads. The vulnerability is described as an authenticated stored XSS with access limited to sufficient privileges for edi...

5.4CVSS5.2AI score0.00197EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2021/11/01 12:0 a.m.2 views

WordPress 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Reactions Lite plugin prior to 1.3.6. The vulnerability stems from a failure to properly clean up input on the wp-admin...

5.4CVSS5.2AI score0.00197EPSS
Exploits2References1
Rows per page
Query Builder