Lucene search
+L

79 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:44 a.m.•11 views

CVE-2023-40678

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS7.1AI score0.00539EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 3:15 p.m.•27 views

CVE-2023-40678

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS0.00539EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:24 p.m.•52 views

CVE-2023-40678

CVE-2023-40678 affects the WordPress Simple URLs plugin (

5.4CVSS7.1AI score0.00539EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:24 p.m.•8 views

CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS7.1AI score0.00539EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:24 p.m.•44 views

CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS0.00539EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•18 views

WordPress plugin Simple URLs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS7.4AI score0.00539EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•5 views

CVE-2023-40678: Missing Authorization

Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through = 117...

5.4CVSS7.3AI score0.00539EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•3 views

PT-2024-12904

Name of the Vulnerable Software and Affected Versions Simple URLs versions 1.17 and earlier Description A Missing Authorization vulnerability in Simple URLs allows exploiting incorrectly configured access control security levels. This issue is related to broken access control, which can be...

5.4CVSS0.00539EPSS
SaveExploits0References8
Packet Storm
Packet Storm
•added 2024/02/05 12:00 a.m.•362 views

WordPress Simple URLs Cross Site Scripting

Exploit Title: simple urls alertorigin...

6.1CVSS7.4AI score0.01726EPSS
SaveExploits6
zdt
zdt
•added 2024/02/05 12:00 a.m.•421 views

Wordpress (simple urls) Plugin < 115 - XSS Vulnerability

Exploit Title: simple urls alertorigin...

6.1CVSS7AI score0.01726EPSS
SaveExploits6
Exploit DB
Exploit DB
•added 2024/02/05 12:00 a.m.•497 views

Wordpress &#039;simple urls&#039; Plugin &lt; 115 - XSS

Exploit Title: simple urls alertorigin...

6.1CVSS7.1AI score0.01726EPSS
SaveExploits6
Prion
Prion
•added 2023/11/30 1:15 p.m.•28 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management:...

4.9CVSS7AI score0.0045EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/30 12:24 p.m.•44 views

CVE-2023-40674 WordPress Simple URLs Plugin <= 118 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management:...

6.5CVSS6.6AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/30 12:24 p.m.•58 views

CVE-2023-40674

CVE-2023-40674 affects the WordPress Simple URLs plugin (versions

6.5CVSS6.3AI score0.0045EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•12 views

WordPress Plugin Simple URLs Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.0045EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•6 views

CVE-2023-40674: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management:...

6.5CVSS6.5AI score0.0045EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•25 views

PT-2023-27592 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management versions n/a through 118 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting...

6.5CVSS5.8AI score0.0045EPSS
SaveExploits0References4
NVD
NVD
•added 2023/10/16 9:15 a.m.•18 views

CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/16 9:15 a.m.•23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/16 8:29 a.m.•74 views

CVE-2023-45606

CVE-2023-45606 is a CSRF vulnerability in the WordPress plugin Simple URLs (Link Cloaking, etc.) for versions up to 120. The issue enables Cross-Site Request Forgery without authentication, potentially allowing attackers to trigger unwanted actions on behalf of logged-in users. Public details fro...

8.8CVSS6.4AI score0.00214EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder