Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.5 views

CVE-2025-69387

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS5.5AI score0.00143EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.2 views

CVE-2025-69387

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS0.00143EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.4 views

CVE-2025-69387

CVE-2025-69387 concerns the WordPress plugin Simple Retail Menus (plugin slug: simple-retail-menus) with affected versions

7.5CVSS5.6AI score0.00143EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.19 views

CVE-2025-69387 WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS0.00143EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.2 views

CVE-2025-69387 WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in whatwouldjessedo Simple Retail Menus simple-retail-menus allows PHP Local File Inclusion.This issue affects Simple Retail Menus: from n/a through = 4.2.1...

7.5CVSS5.5AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin Simple Retail Menus 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.8AI score0.00143EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/09 10:31 a.m.4 views

WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Skalucy in WordPress Plugin Simple Retail Menus versions = 4.2.1...

7.5CVSS5.5AI score0.00143EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-5081

Malware in sbrugna...

6.5CVSS6.4AI score0.00318EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:15 a.m.6 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8.4AI score0.00318EPSS
Exploits1References1
NVD
NVD
added 2014/08/06 7:55 p.m.10 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8AI score0.00318EPSS
Exploits1References2
Prion
Prion
added 2014/08/06 7:55 p.m.17 views

Sql injection

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

6.5CVSS8.7AI score0.00318EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2014/08/06 7:0 p.m.33 views

CVE-2014-5183

The CVE concerns the WordPress Simple Retail Menus plugin (before 4.1). The vulnerability is an SQL injection in includes/mode-edit.php exposed via the targetmenu parameter in an edit action to wp-admin/admin.php, exploitable by remote authenticated editors. Impact is arbitrary SQL execution with...

6.5CVSS8.3AI score0.00318EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2014/08/06 7:0 p.m.16 views

CVE-2014-5183

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

8AI score0.00318EPSS
Exploits1References2
Patchstack
Patchstack
added 2014/08/06 12:0 a.m.14 views

WordPress Simple Retail Menus Plugin <= 4.0 - SQL Injection

Because of this vulnerability in includes/mode-edit.php, remote authenticated editors can execute arbitrary SQL commands in an edit action to wp-admin/admin.php via the "targetmenu" parameter. Solution Update the plugin...

6.5CVSS6.5AI score0.00318EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder