Lucene search
K

84 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-43467

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00525EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-36552

Malicious code in bioql PyPI...

6.1CVSS7AI score0.00415EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/20 7:41 p.m.10 views

WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple User Registration versions = 6.8...

8.8CVSS5.9AI score0.00332EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/06/26 2:15 a.m.1 views

CVE-2025-4334

The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...

9.8CVSS5.8AI score0.02055EPSS
Exploits5References2
NVD
NVD
added 2025/06/26 2:15 a.m.11 views

CVE-2025-4334

The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...

9.8CVSS0.02055EPSS
Exploits5References3
Cvelist
Cvelist
added 2025/06/26 2:6 a.m.18 views

CVE-2025-4334 Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...

9.8CVSS0.02055EPSS
Exploits5References3
Positive Technologies
Positive Technologies
added 2025/06/26 12:0 a.m.7 views

PT-2025-26912 · WordPress · Simple User Registration

Name of the Vulnerable Software and Affected Versions: The Simple User Registration plugin for WordPress versions up to, and including, 6.3 Description: The issue is due to insufficient restrictions on user meta values that can be supplied during registration, making it possible for unauthenticat...

9.8CVSS6.7AI score0.02055EPSS
Exploits5References11
CNNVD
CNNVD
added 2025/06/26 12:0 a.m.11 views

WordPress plugin Simple User Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.4AI score0.02055EPSS
Exploits5References2
Packet Storm News
Packet Storm News
added 2025/06/26 12:0 a.m.11 views

WordPress Simple User Registration 6.3 Privilege Escalation

WordPress Simple User Registration plugin versions 6.3 and below suffer from an unauthenticated privilege escalation vulnerability. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to regist...

9.8CVSS6.7AI score0.02055EPSS
Exploits5
RedhatCVE
RedhatCVE
added 2025/05/23 5:11 a.m.9 views

CVE-2023-32298

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kathy Darling Simple User Listing plugin = 1.9.2 versions...

7.1CVSS7AI score0.00415EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 3:7 a.m.21 views

CVE-2025-3489

A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...

6.1CVSS6.3AI score0.0042EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/04/10 3:0 a.m.7 views

CVE-2025-3489 Nababur Simple-User-Management-System register.php cross site scripting

A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...

5.3CVSS4.3AI score0.0042EPSS
Exploits1References4
CVE
CVE
added 2025/04/10 3:0 a.m.56 views

CVE-2025-3489

CVE-2025-3489 affects Nababur Simple-User-Management-System 1.0. The issue is in the file /register.php where manipulation of the name/username argument leads to cross-site scripting. The attack can be launched remotely and the exploit has been publicly disclosed. Multiple sources corroborate the...

6.1CVSS4.3AI score0.0042EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/04/10 3:0 a.m.47 views

CVE-2025-3489 Nababur Simple-User-Management-System register.php cross site scripting

A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...

5.3CVSS0.0042EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/04/10 12:0 a.m.6 views

PT-2025-15895 · Unknown · Nababur Simple-User-Management-System

Name of the Vulnerable Software and Affected Versions: Nababur Simple-User-Management-System version 1.0 Description: A vulnerability was found in the file /register.php, where the manipulation of the name/username argument leads to cross-site scripting. The attack may be launched remotely. The...

6.1CVSS4.2AI score0.0042EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/02/09 10:19 a.m.3 views

CVE-2025-25140

Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...

7.1CVSS7.2AI score0.00131EPSS
Exploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.9 views

CVE-2025-25140

Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...

7.1CVSS0.00131EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.48 views

CVE-2025-25140

CVE-2025-25140 : CSRF in WordPress plugin Simple User Profile (versions

7.1CVSS7.2AI score0.00131EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 10:11 a.m.5 views

CVE-2025-25140 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...

7.1CVSS7.2AI score0.00131EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/07 10:11 a.m.14 views

CVE-2025-25140 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...

7.1CVSS0.00131EPSS
Exploits0References1
Rows per page
Query Builder