Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-50955

Malicious code in bioql PyPI...

6.1CVSS9AI score0.00311EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:28 a.m.3 views

CVE-2024-12555

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS6.4AI score0.00311EPSS
Exploits0References1
NVD
NVD
added 2024/12/14 5:15 a.m.8 views

CVE-2024-12555

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS0.00311EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/14 4:23 a.m.8 views

CVE-2024-12555 SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS6.5AI score0.00311EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/14 4:23 a.m.14 views

CVE-2024-12555 SIP Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted...

6.1CVSS0.00311EPSS
Exploits0References2
CVE
CVE
added 2024/12/14 4:23 a.m.38 views

CVE-2024-12555

CVE-2024-12555 : The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to 1.0 due to missing nonce validation, allowing unauthenticated attackers to induce an admin action that can inject malicious scripts via a forged request. The description and ...

6.1CVSS5.9AI score0.00311EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/14 12:0 a.m.1 views

WordPress plugin SIP Calculator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin SIP...

6.1CVSS8.4AI score0.00311EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/12/13 8:25 p.m.2 views

WordPress SIP Calculator plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin SIP Calculator versions = 1.0...

6.1CVSS5.9AI score0.00311EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder