Lucene search
+L

624 matches found

RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•17 views

CVE-2025-49294

Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through =...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•19 views

CVE-2025-49294

Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through =...

5.3CVSS0.00374EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 12:53 p.m.•35 views

CVE-2025-49294 WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through =...

5.3CVSS0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:53 p.m.•11 views

CVE-2025-49293 WordPress Crawlomatic Multisite Scraper Post Generator <= 2.6.8.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through 2.6.8.2...

4.3CVSS6AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:53 p.m.•69 views

CVE-2025-49293

CVE-2025-49293 is a Missing Authorization vulnerability in the WordPress plugin Crawlomatic Multisite Scraper Post Generator. Exploitation could allow unauthorized access due to misconfigured access control. Affected versions are Crawlomatic Multisite Scraper Post Generator

4.3CVSS6AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•5 views

CVE-2025-49293: Missing Authorization

Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through...

4.3CVSS6AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•11 views

CVE-2025-49294: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through =...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•23 views

PT-2025-24228 · Unknown · Crawlomatic Multipage Scraper Post Generator

Name of the Vulnerable Software and Affected Versions: Crawlomatic Multisite Scraper Post Generator versions 2.6.8.2 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For versions...

5.3CVSS5AI score0.00374EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•23 views

PT-2025-24227 · Unknown · Crawlomatic Multipage Scraper Post Generator

Name of the Vulnerable Software and Affected Versions: Crawlomatic Multisite Scraper Post Generator versions 2.6.8.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

4.3CVSS4.4AI score0.00295EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/06/05 12:14 a.m.•23 views

WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Crawlomatic Multisite Scraper Post Generator versions = 2.6.8.2...

4.3CVSS6.7AI score0.00295EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2025/06/04 12:52 a.m.•5 views

Malware in tradingv-scraper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/06/04 12:52 a.m.•13 views

MAL-2025-4696 Malicious code in tradingv-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d77275e798392b8c057b8a2e84fc0af74d6d01c3a2d426ee0b05ef9ce80a6b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/04 12:52 a.m.•10 views

Malicious code in tradingv-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d77275e798392b8c057b8a2e84fc0af74d6d01c3a2d426ee0b05ef9ce80a6b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:13 a.m.•19 views

CVE-2024-37208

Server-Side Request Forgery SSRF vulnerability in Robert Macchi WP Scraper.This issue affects WP Scraper: from n/a through 5.7...

4.9CVSS7AI score0.00209EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 9:01 a.m.•20 views

CVE-2024-3663

The WP Scraper plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpscrapermultiscrapeaction function in all versions up to, and including, 5.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to create...

4.3CVSS5.9AI score0.00343EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/05/19 4:52 p.m.•3 views

twitter-scraper-selenium (6.2.2) potentially affected by CVE-2025-47273 via setuptools (74.1.1)

setuptools PYPI version 74.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - twitter-scraper-selenium 6.2.2 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

8.8CVSS6.8AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/17 4:15 p.m.•4 views

twitter-scraper-selenium (6.2.2) potentially affected by CVE-2025-47273 via setuptools (74.1.1)

setuptools PYPI version 74.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - twitter-scraper-selenium 6.2.2 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.8AI score0.01592EPSS
SaveExploits5
Vulnrichment
Vulnrichment
•added 2025/05/17 5:30 a.m.•18 views

CVE-2025-4389 Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomaticgeneratefeaturedimage function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to...

9.8CVSS8.8AI score0.0108EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/05/17 12:00 a.m.•28 views

PT-2025-21776

Name of the Vulnerable Software and Affected Versions: Crawlomatic Multipage Scraper Post Generator plugin for WordPress versions up to, and including, 2.6.8.1 Description: The issue is related to arbitrary file uploads due to missing file type validation in the crawlomatic generate featured imag...

9.8CVSS7.9AI score0.0108EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/17 12:00 a.m.•5 views

CVE-2025-4389: Unrestricted Upload of File with Dangerous Type

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomaticgeneratefeaturedimage function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to...

9.8CVSS8.9AI score0.0108EPSS
SaveExploits1References1
Rows per page
Query Builder