Lucene search
+L

375 matches found

NVD
NVD
•added 2025/02/13 2:16 p.m.•25 views

CVE-2025-26545

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/13 1:52 p.m.•30 views

CVE-2025-26545 WordPress Related Posts Line-up-Exactly by Milliard plugin <= 0.0.22 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/13 1:52 p.m.•85 views

CVE-2025-26545

CVE-2025-26545 affects the WordPress plugin Related Posts Line-up-Exactly by Milliard (versions ≤ 0.0.22). The entry documents a CSRF vulnerability that enables a Stored XSS condition. The issue is triggered when an authenticated user performs a request, allowing injected script code to be stored...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/13 12:47 p.m.•15 views

WordPress Related Posts Line-up-Exactly by Milliard plugin <= 0.0.22 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Related Posts Line-up-Exactly by Milliard versions = 0.0.22...

7.1CVSS6.2AI score0.00146EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•1 views

CVE-2025-26545: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in shisuh Related Posts Line-up-Exactly by Milliard related-posts-line-up-exactry-by-milliard allows Stored XSS.This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through = 0.0.22...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/09 10:19 a.m.•11 views

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

7.1CVSS7.2AI score0.00155EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•18 views

CVE-2025-25123

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

7.1CVSS0.00155EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/07 10:11 a.m.•9 views

CVE-2025-25123 WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2...

7.1CVSS6.8AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•50 views

CVE-2025-25123

CVE-2025-25123 maps to a WordPress plugin issue: Easy Related Posts, affected versions are

7.1CVSS7.2AI score0.00155EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•2 views

CVE-2025-25123: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in xdark Easy Related Posts easy-related-posts allows Stored XSS.This issue affects Easy Related Posts: from n/a through = 2.0.2...

7.1CVSS5.8AI score0.00155EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:56 a.m.•14 views

CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

7.1CVSS7.2AI score0.00203EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:13 a.m.•15 views

CVE-2024-32549

Cross-Site Request Forgery CSRF vulnerability in Microkid Related Posts for WordPress allows Cross-Site Scripting XSS.This issue affects Related Posts for WordPress: from n/a through 4.0.3...

7.1CVSS5.1AI score0.00253EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/03 4:12 p.m.•12 views

WordPress Easy Related Posts plugin <= 2.0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Easy Related Posts versions = 2.0.2...

7.1CVSS6.2AI score0.00155EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/02/01 8:15 a.m.•17 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS5.8AI score0.00264EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/01 8:15 a.m.•36 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS0.00264EPSS
SaveExploits0References2
Circl
Circl
•added 2025/02/01 4:16 a.m.•25 views

CVE-2024-13547

creationtimestamp| type| source ---|---|--- 2025-02-01 04:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3npevnhs27 2025-02-01 05:25:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3711 2025-02-01 07:16:31+00:00| seen|...

6.4CVSS7.3AI score0.00246EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/02/01 12:07 a.m.•18 views

WordPress Custom Related Posts plugin <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Private Post Search and Relation Updates vulnerability discovered by Lucio Sá in WordPress Plugin Custom Related Posts versions = 1.7.3...

5.4CVSS7AI score0.00264EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/01 12:00 a.m.•4 views

CVE-2024-12825: Missing Authorization

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS5.6AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 8:15 p.m.•17 views

CVE-2025-23476

Cross-Site Request Forgery CSRF vulnerability in isnowfy my-related-posts my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through = 1.1...

7.1CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:05 p.m.•62 views

CVE-2025-23476

CVE-2025-23476 is a CSRF to Stored XSS vulnerability in the WordPress plugin my-related-posts (up to version 1.1). The CVSS 3.1 base score is 7.1 (High) with network attack vector, low attack complexity, and user interaction required. Affected software is the my-related-posts plugin for WordPress...

7.1CVSS7.2AI score0.00203EPSS
SaveExploits0References1
Rows per page
Query Builder