Lucene search
+L

87 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/30 12:00 a.m.•9 views

CVE-2019-15831: Cross-Site Request Forgery (CSRF)

The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...

8.8CVSS7.7AI score0.00737EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/30 12:00 a.m.•5 views

PT-2019-14420

Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.12 Description The issue concerns a CSRF problem in the settings page of the plugin. Recommendations For versions prior to 1.12, update to version 1.12 or later to resolve the...

8.8CVSS0.00737EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/30 12:00 a.m.•7 views

PT-2019-14421

Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.13 Description The issue concerns a CSRF problem in the visitors-traffic-real-time-statistics plugin for WordPress. Recommendations For versions prior to 1.13, update to version...

8.8CVSS0.00795EPSS
SaveExploits1References4
CNVD
CNVD
•added 2019/08/15 12:00 a.m.•17 views

WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30373)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.00923EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2019/07/04 12:00 a.m.•21 views

WordPress Visitors Traffic Real Time Statistics plugin <= 1.12 - Cross-Site Request Forgery (CSRF) leading to Stored XSS/SQLi vulnerabilities

Cross-Site Request Forgery CSRF vulnerability leading to Stored XSS/SQLi vulnerabilities found by Paul Dannewitz in WordPress Visitors Traffic Real Time Statistics plugin versions = 1.12. Solution Update the WordPress Visitors Traffic Real Time Statistics plugin to the latest available version at...

3.4AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2010/06/19 12:00 a.m.•43 views

AdMan Standalone Ad Server Cross Site Scripting / SQL Injection

=========================================================== AdMan Standalone Ad Server SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/27 12:00 a.m.•37 views

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

SaveExploits0
Rows per page
Query Builder