Lucene search
+L

2125 matches found

OSV
OSV
added 2023/10/10 3:15 p.m.5 views

CVE-2023-44994

Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/10 3:15 p.m.20 views

CVE-2023-44994

Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 3:15 p.m.7 views

CVE-2023-44475

Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...

8.8CVSS7.3AI score0.00216EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 3:15 p.m.13 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/10 2:31 p.m.18 views

CVE-2023-44994 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...

4.3CVSS7.1AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/10 2:31 p.m.38 views

CVE-2023-44994

CVE-2023-44994 is a CSRF vulnerability in the WordPress ShortCodes UI plugin (Bainternet ShortCodes UI) affecting versions

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/10 2:31 p.m.29 views

CVE-2023-44994 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bainternet ShortCodes UI plugin = 1.9.8 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/10 2:25 p.m.49 views

CVE-2023-44475

CVE-2023-44475 corresponds to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Add Shortcodes Actions And Filters, affecting versions 2.0.9, specifically 2.10 or later. If patching is not possible, monitor for vendor advisories and apply mitigations once available.

8.8CVSS7AI score0.00216EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/10 2:25 p.m.14 views

CVE-2023-44475 WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin = 2.0.9 versions...

5.4CVSS7.1AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 5:15 a.m.8 views

CVE-2023-5467

The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

5.4CVSS6AI score0.00412EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/10/10 4:29 a.m.4 views

CVE-2023-5467

The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.6AI score0.00412EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.9 views

PT-2023-29337 · WordPress · Bainternet Shortcodes Ui

Name of the Vulnerable Software and Affected Versions: Bainternet ShortCodes UI plugin versions 1.9.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

8.8CVSS8.5AI score0.00214EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.7 views

WordPress Plugin ShortCodes UI Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00214EPSS
SaveExploits0References2
wpexploit
wpexploit
added 2023/10/09 12:0 a.m.148 views

Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

5.4CVSS5.4AI score0.00449EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2023/10/03 12:0 a.m.18 views

WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software ShortCodes UI Type Plugin Vulnerable versions = 1.9.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44994 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 381936b7d175 Credits Mika Required privilege...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.6 views

WordPress Plugin The Post Grid - Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin The Post Grid - Shortcode,...

8.8CVSS6.5AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/02 8:15 a.m.9 views

CVE-2023-41728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...

5.4CVSS5.8AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/02 7:35 a.m.70 views

CVE-2023-41728

CVE-2023-41728: WordPress Rescue Shortcodes plugin

6.5CVSS6.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/02 7:35 a.m.21 views

CVE-2023-41728 WordPress Rescue Shortcodes Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...

6.5CVSS6.7AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/02 7:35 a.m.30 views

CVE-2023-41728 WordPress Rescue Shortcodes Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...

6.5CVSS6.6AI score0.0031EPSS
SaveExploits0References1
Rows per page
Query Builder