Lucene search
+L

578 matches found

CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin reCAPTCHA for all security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.6AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•9 views

CVE-2023-32599: Missing Authorization

Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through 1.22...

4.3CVSS5.9AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/02 2:15 a.m.•26 views

CVE-2024-8739

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.00454EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/11/02 2:03 a.m.•17 views

CVE-2024-8739 ReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scripting

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6.3AI score0.00454EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/02 2:03 a.m.•90 views

CVE-2024-8739

CVE-2024-8739 concerns the ReCaptcha Integration for WordPress plugin vulnerable to Reflected Cross-Site Scripting (XSS) due to improper escaping in add_query_arg on the URL for all versions up to and including 1.2.5. The issue allows unauthenticated attackers to inject arbitrary scripts on pages...

6.1CVSS6AI score0.00454EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2024/11/02 2:03 a.m.•36 views

CVE-2024-8739 ReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scripting

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6.1AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/11/02 12:00 a.m.•19 views

WordPress Plugin: ReCaptcha Integration for WordPress – Cross-Site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS6AI score0.00454EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/02 12:00 a.m.•7 views

CVE-2024-8739: Improper Neutralization of Input During Web Page Generation

The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.00454EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/01 9:25 p.m.•14 views

WordPress ReCaptcha Integration for WordPress plugin <= 1.2.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin ReCaptcha Integration for WordPress versions = 1.2.5...

6.1CVSS6.3AI score0.00454EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•19 views

PT-2024-39216 · WordPress · Wedevs Recaptcha Integration For Wordpress

Name of the Vulnerable Software and Affected Versions: ReCaptcha Integration for WordPress plugin versions 1.2.5 and earlier Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This allows unauthenticated attacker...

6.1CVSS6.8AI score0.00454EPSS
SaveExploits0References11
Patchstack
Patchstack
•added 2024/11/01 12:00 a.m.•24 views

WordPress ReCaptcha Integration for WordPress Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software ReCaptcha Integration for WordPress Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.2.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8739 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 762d16689385 Credit...

6.1CVSS5.8AI score0.00454EPSS
SaveExploits0References3Affected Software1
Information Security Automation
Information Security Automation
•added 2024/10/21 1:01 p.m.•48 views

September episode of “In The Trend of VM”: 7 CVEs, fake reCAPTCHA, lebanese pagers, VM and IT annual bonuses

September episode of "In The Trend of VM": 7 CVEs, fake reCAPTCHA, lebanese pagers, VM and IT annual bonuses. Starting this month, we decided to slightly expand the topics of the videos and increase their duration. I cover not only the trending vulnerabilities of September, but also social...

9.8CVSS7.7AI score0.90369EPSS
SaveExploits13
NVD
NVD
•added 2024/07/20 9:15 a.m.•40 views

CVE-2024-37946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs ReCaptcha Integration for WordPress wp-recaptcha-integration allows DOM-Based XSS.This issue affects ReCaptcha Integration for WordPress: from n/a through = 1.2.7...

5.9CVSS0.00277EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/07/20 8:49 a.m.•43 views

CVE-2024-37946 WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs ReCaptcha Integration for WordPress wp-recaptcha-integration allows DOM-Based XSS.This issue affects ReCaptcha Integration for WordPress: from n/a through = 1.2.7...

5.9CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/20 8:49 a.m.•19 views

CVE-2024-37946 WordPress ReCaptcha Integration for WordPress plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in weDevs ReCaptcha Integration for WordPress allows Stored XSS.This issue affects ReCaptcha Integration for WordPress: from n/a through 1.2.5...

5.9CVSS6.9AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/20 8:49 a.m.•107 views

CVE-2024-37946

CVE-2024-37946 affects the weDevs ReCaptcha Integration for WordPress plugin (wp-recaptcha-integration) up to version 1.2.7. The issue is an improper neutralization of input during web page generation, resulting in DOM-based XSS. Exploitation details are not provided in the documents; CVSS vector...

5.9CVSS5.9AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/20 12:00 a.m.•18 views

PT-2024-27850 · Wedevs · Wedevs Recaptcha Integration For Wordpress

Name of the Vulnerable Software and Affected Versions: weDevs ReCaptcha Integration for WordPress versions 1.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This mean...

5.9CVSS6.1AI score0.00277EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/20 12:00 a.m.•6 views

CVE-2024-37946: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs ReCaptcha Integration for WordPress wp-recaptcha-integration allows DOM-Based XSS.This issue affects ReCaptcha Integration for WordPress: from n/a through = 1.2.7...

5.9CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/10 8:51 a.m.•18 views

WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LuxF0z in WordPress Plugin ReCaptcha Integration for WordPress versions = 1.2.7...

5.9CVSS6.1AI score0.00277EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/10 12:00 a.m.•24 views

WordPress ReCaptcha Integration for WordPress Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software ReCaptcha Integration for WordPress Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37946 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 62521f041ddc Credits LuxF0z Required...

5.9CVSS6.7AI score0.00277EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder