Lucene search
+L

2496 matches found

OpenVAS
OpenVAS
•added 2022/11/10 12:00 a.m.•52 views

WordPress Shortcodes Ultimate Plugin < 5.12.1 Multiple CSRF Vulnerabilities

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/08 7:15 p.m.•13 views

CVE-2022-41136

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in Vladimir Anokhin's Shortcodes Ultimate plugin = 5.12.0 on WordPress...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/08 7:15 p.m.•28 views

CVE-2022-41136

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in Vladimir Anokhin's Shortcodes Ultimate plugin = 5.12.0 on WordPress...

8.8CVSS0.00325EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/08 6:28 p.m.•83 views

CVE-2022-41136

The CVE-2022-41136 entry concerns the WordPress Shortcodes Ultimate plugin, specifically versions

8.8CVSS6.9AI score0.00325EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/08 12:00 a.m.•1 views

CVE-2022-41136: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in Vladimir Anokhin's Shortcodes Ultimate plugin = 5.12.0 on WordPress...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•9 views

PT-2022-25668 · WordPress · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: Shortcodes Ultimate plugin versions prior to 5.12.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that leads to Stored Cross-Site Scripting XSS. This means an attacker can trick a user into performing unintended...

8.8CVSS7.9AI score0.00325EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/11/08 12:00 a.m.•11 views

WordPress plugin Shortcodes Ultimate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS7.6AI score0.00325EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/10/13 12:00 a.m.•41 views

WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Shortcodes Ultimate plugin versions = 5.12.0. Solution Update the WordPress Shortcodes Ultimate plugin to the latest available version at least...

8.8CVSS1.9AI score0.00325EPSS
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2022/10/12 9:15 p.m.•9 views

CVE-2022-41136

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in Vladimir Anokhin's Shortcodes Ultimate plugin = 5.12.0 on WordPress...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/10/11 8:15 p.m.•13 views

CVE-2022-38086

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

4.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/11 8:15 p.m.•26 views

CVE-2022-38086

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

5.4CVSS0.0032EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/11 8:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

4.3CVSS4.7AI score0.0032EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 7:35 p.m.•79 views

CVE-2022-38086

CVE-2022-38086 affects the WordPress plugin Shortcodes Ultimate

5.4CVSS4.7AI score0.0032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/11 7:35 p.m.•41 views

CVE-2022-38086 WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

5.4CVSS6.6AI score0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/11 7:35 p.m.•8 views

CVE-2022-38086 WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

5.4CVSS6AI score0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•0 views

CVE-2022-38086: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Shortcodes Ultimate plugin = 5.12.0 at WordPress leading to plugin preset settings change...

5.4CVSS5.5AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•13 views

WordPress plugin Shortcodes Ultimate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

5.4CVSS5AI score0.0032EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/10/02 12:00 a.m.•57 views

WordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Preset Settings Change discovered by Dave Jong Patchstack in WordPress Shortcodes Ultimate plugin versions = 5.12.0. Solution Update the WordPress Shortcodes Ultimate plugin to the latest available version at least 5.12.1...

5.4CVSS2.9AI score0.0032EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2022/10/02 12:00 a.m.•23 views

Shortcodes Ultimate < 5.12.1 - Settings Preset Update via CSRF

The plugin does not have CSRF check in place when updating its preset settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

5.4CVSS4.7AI score0.0032EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•57 views

WordPress CPO Shortcodes plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS4.8AI score0.00584EPSS
SaveExploits0References1
Rows per page
Query Builder