Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:27 a.m.7 views

CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

8.8CVSS7.1AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-12197

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00943EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.20 views

CVE-2023-0098

The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber...

8.8CVSS7.7AI score0.00943EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.22 views

CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS0.00422EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.3 views

The vulnerability of the Simple URLs plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Simple URLs plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

6.4CVSS6AI score0.01726EPSS
Exploits6References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/13 2:32 p.m.5 views

CVE-2023-0098 Simple URLs < 115 - Subscriber+ SQLi

The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber...

9.1AI score0.00943EPSS
Exploits2References1
CNNVD
CNNVD
added 2023/02/13 12:0 a.m.4 views

WordPress plugin Simple URLs SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.00943EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2023/02/13 12:0 a.m.7 views

PT-2023-5574 · WordPress · Simple Urls

Name of the Vulnerable Software and Affected Versions: Simple URLs WordPress plugin versions prior to 115 Description: The issue exists due to the lack of protection of the web page structure, allowing an attacker to perform cross-site scripting attacks. This can lead to Reflected Cross-Site...

6.4CVSS5.9AI score0.01726EPSS
Exploits6References14
Rows per page
Query Builder