Lucene search
K

2096 matches found

CNNVD
CNNVD
added 2023/11/22 12:0 a.m.2 views

WordPress Plugin Theme Blvd Shortcodes Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.4CVSS6.1AI score0.00445EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.4 views

WordPress Plugin CPO Shortcodes Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

6.4CVSS6.1AI score0.00434EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.3 views

PT-2023-32277 · WordPress · Cpo Shortcodes

Name of the Vulnerable Software and Affected Versions: CPO Shortcodes plugin for WordPress versions up to, and including, 1.5.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's shortcodes, allowing authenticated...

6.4CVSS6AI score0.00434EPSS
Exploits0References5
Patchstack
Patchstack
added 2023/11/20 12:0 a.m.15 views

WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Bootstrap Shortcodes Ultimate Type Plugin Vulnerable versions = 4.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47851 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 29366c5c1adb Credits Ngô Thiên An ancorn from...

6.5CVSS6.9AI score0.00303EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/16 12:0 a.m.15 views

ShortCodes UI <= 1.9.8 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS6.1AI score0.00385EPSS
Exploits0
Patchstack
Patchstack
added 2023/11/15 12:0 a.m.8 views

WordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)

Software BP Profile Shortcodes Extra Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47815 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 426f08e56edb Credits Ngô Thiên An ancorn from...

6.5CVSS6.6AI score0.00416EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2023/11/13 11:15 p.m.1 views

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

6.1CVSS5.8AI score0.00437EPSS
Exploits0References1
NVD
NVD
added 2023/11/13 11:15 p.m.10 views

CVE-2023-47695

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

7.1CVSS0.00437EPSS
Exploits0References1
Prion
Prion
added 2023/11/13 11:15 p.m.16 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

5.8CVSS6.2AI score0.00437EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/13 10:59 p.m.6 views

CVE-2023-47695 WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Scribit Shortcodes Finder plugin = 1.5.3 versions...

7.1CVSS5.8AI score0.00437EPSS
Exploits0References1
CVE
CVE
added 2023/11/13 10:59 p.m.38 views

CVE-2023-47695

The CVE-2023-47695 entry concerns the WordPress plugin Scribit Shortcodes Finder (versions ≤ 1.5.3). The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of parameters, allowing an attacker to inject scripts into pages vie...

7.1CVSS6AI score0.00437EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/11/13 3:15 a.m.1 views

CVE-2023-23800

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

6.5CVSS5.8AI score0.00491EPSS
Exploits0References1
NVD
NVD
added 2023/11/13 3:15 a.m.9 views

CVE-2023-23800

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

7.1CVSS0.00491EPSS
Exploits0References1
Prion
Prion
added 2023/11/13 3:15 a.m.15 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

4CVSS7.4AI score0.00491EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/13 2:58 a.m.7 views

CVE-2023-23800 WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

7.1CVSS7.2AI score0.00491EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/13 2:58 a.m.13 views

CVE-2023-23800 WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcodes Ultimate: from n/a through 5.12.6...

7.1CVSS7.2AI score0.00491EPSS
Exploits0References1
CVE
CVE
added 2023/11/13 2:58 a.m.59 views

CVE-2023-23800

CVE-2023-23800 concerns the WordPress plugin “WP Shortcodes Plugin — Shortcodes Ultimate” (versions

7.1CVSS6.4AI score0.00491EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.2 views

WordPress Plugin Shortcodes Finder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.1CVSS6.3AI score0.00437EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.2 views

WordPress Plugin WP Shortcodes Plugin - Shortcodes Ultimate Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP...

7.1CVSS6.7AI score0.00491EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/13 12:0 a.m.2 views

PT-2023-30571 · WordPress · Scribit Shortcodes Finder

Name of the Vulnerable Software and Affected Versions: Scribit Shortcodes Finder plugin versions = 1.5.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. Recommendations: For Scribit Shortcodes Finder plugin versions = 1.5.3, update to a version higher than...

7.1CVSS5.9AI score0.00437EPSS
Exploits0References6
Rows per page
Query Builder