Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/11/05 4:14 a.m.1 views

CVE-2025-12069

The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the updatewpglobalscreenoptions action handler. This makes it possible for unauthenticated attackers to modify global...

4.3CVSS5.5AI score0.00014EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/04 4:47 a.m.3 views

WordPress WP Global Screen Options plugin <= 0.2 - Cross-Site Request Forgery to Screen Options Update vulnerability

Cross-Site Request Forgery to Screen Options Update vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Global Screen Options versions = 0.2...

4.3CVSS7AI score0.00014EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/11/04 4:15 a.m.1 views

CVE-2025-12069

The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the updatewpglobalscreenoptions action handler. This makes it possible for unauthenticated attackers to modify global...

4.3CVSS0.00014EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/04 3:26 a.m.4 views

CVE-2025-12069 WP Global Screen Options <= 0.2 - Cross-Site Request Forgery to Screen Options Update

The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the updatewpglobalscreenoptions action handler. This makes it possible for unauthenticated attackers to modify global...

4.3CVSS0.00014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/04 3:26 a.m.2 views

CVE-2025-12069 WP Global Screen Options <= 0.2 - Cross-Site Request Forgery to Screen Options Update

The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the updatewpglobalscreenoptions action handler. This makes it possible for unauthenticated attackers to modify global...

4.3CVSS5.2AI score0.00014EPSS
Exploits0References2
CVE
CVE
added 2025/11/04 3:26 a.m.4 views

CVE-2025-12069

CVE-2025-12069 concerns the WP Global Screen Options WordPress plugin (versions

4.3CVSS5.2AI score0.00014EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

WordPress plugin WP Global Screen Options 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00014EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.1 views

PT-2025-44918

Name of the Vulnerable Software and Affected Versions WP Global Screen Options versions up to and including 0.2 Description The WP Global Screen Options plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of nonce validation in the updatewpglobalscreenoptio...

4.3CVSS6.2AI score0.00014EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/04 10:40 p.m.5 views

CVE-2024-8247

The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attackers, with subscriber-level access and...

8.8CVSS8.7AI score0.00304EPSS
Exploits0References1
OSV
OSV
added 2024/09/06 4:15 a.m.0 views

CVE-2024-8247

The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attackers, with subscriber-level access and...

8.8CVSS5.7AI score0.00304EPSS
Exploits0References3
CVE
CVE
added 2024/09/06 3:30 a.m.46 views

CVE-2024-8247

The CVE-2024-8247 entry concerns the Newsletters plugin for WordPress (

8.8CVSS8.8AI score0.00304EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/06 3:30 a.m.15 views

CVE-2024-8247 Newsletters <= 4.9.9.2 - Authenticated Privilege Escalation

The Newsletters plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.9.9.2. This is due to the plugin not restricting what user meta can be updated as screen options. This makes it possible for authenticated attackers, with subscriber-level access and...

8.8CVSS8.8AI score0.00304EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/09/05 12:0 a.m.2 views

PT-2024-38889 · WordPress · Newsletters

Name of the Vulnerable Software and Affected Versions: The Newsletters plugin for WordPress versions up to, and including, 4.9.9.2 Description: The issue arises because the plugin does not restrict what user meta can be updated as screen options, making it possible for authenticated attackers wit...

8.8CVSS6.8AI score0.00304EPSS
Exploits0References15
ATTACKERKB
ATTACKERKB
added 2023/06/06 10:15 a.m.2 views

CVE-2023-2833

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

8.8CVSS7.2AI score0.26793EPSS
Exploits4References6
OSV
OSV
added 2023/06/06 10:15 a.m.2 views

CVE-2023-2833

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

8.8CVSS5.8AI score
Exploits0References5
Prion
Prion
added 2023/06/06 10:15 a.m.12 views

Authorization

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

6.5CVSS8.5AI score0.26793EPSS
Exploits4References5Affected Software1
CNNVD
CNNVD
added 2023/06/06 12:0 a.m.4 views

WordPress plugin ReviewX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS8.3AI score0.26793EPSS
Exploits4References6
Positive Technologies
Positive Technologies
added 2023/06/06 12:0 a.m.5 views

PT-2023-21652 · WordPress · Reviewx

Name of the Vulnerable Software and Affected Versions: ReviewX plugin for WordPress versions up to, and including, 1.6.13 Description: The issue is related to privilege escalation due to insufficient restriction on the rx set screen options function. This allows authenticated attackers with minim...

8.8CVSS8.8AI score0.26793EPSS
Exploits4References9
NVD
NVD
added 2004/10/22 4:0 a.m.12 views

CVE-2004-1625

pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown...

5CVSS6.9AI score0.00739EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2004/10/22 12:0 a.m.2 views

PT-2004-2532 · Pgina · Pgina

Name of the Vulnerable Software and Affected Versions: pGina versions 1.7.6 and possibly older Description: The issue allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown when the Restart or Shutdown options are enabled on the logi...

5CVSS7AI score0.00739EPSS
Exploits0References4
Rows per page
Query Builder