Lucene search
+L

22790 matches found

CNNVD
CNNVD
added 2025/12/31 12:00 a.m.11 views

WordPress plugin iNext Woo Pincode Checker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00117EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.11 views

WordPress WP Abstracts plugin <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin WP Abstracts versions = 2.7.2...

6.1CVSS5.5AI score0.002EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.10 views

WordPress plugin FormFacade 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

4.3CVSS6.6AI score0.00117EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.13 views

WordPress XCloner plugin <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save() vulnerability

Cross-Site Request Forgery in XclonerRemoteStorage:save vulnerability discovered by Rafshanzani Suhada in WordPress Plugin XCloner versions = 4.8.2...

4.3CVSS5.9AI score0.00122EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.12 views

WordPress Quantic Social Image Hover plugin <= 1.0.8 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Quantic Social Image Hover versions = 1.0.8...

4.3CVSS5.9AI score0.00147EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.18 views

PT-2025-54281

Name of the Vulnerable Software and Affected Versions Page Carbajal Custom Post Status versions through 1.1.0 Description A Cross-Site Request Forgery CSRF issue exists in Page Carbajal Custom Post Status, which can also lead to Stored Cross-Site Scripting XSS. The issue impacts the Custom Post...

7.1CVSS5.4AI score0.00112EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.14 views

WordPress Bread & Butter plugin <= 7.11.1374 - Cross-Site Request Forgery to Arbitrary File Upload vulnerability

Cross-Site Request Forgery to Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin Bread & Butter versions = 7.11.1374...

8.8CVSS5.9AI score0.00319EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.11 views

PT-2025-54284

Name of the Vulnerable Software and Affected Versions Wolfgang Häfelinger Custom Style versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in Wolfgang Häfelinger Custom Style, which also allows for Stored Cross-Site Scripting XSS. This allows an attacker to potentially...

7.1CVSS5.4AI score0.00112EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.10 views

WordPress EKC Tournament Manager plugin < 2.2.2 - Delete Tournaments via CSRF vulnerability

Delete Tournaments via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin EKC Tournament Manager versions 2.2.2...

5.4CVSS5.9AI score0.00176EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.15 views

WordPress WP MultiTasking plugin <= 0.1.12 - Header/Footer/Body Script Update via CSRF vulnerability

Header/Footer/Body Script Update via CSRF vulnerability discovered by Norbert Hofmann in WordPress Plugin WP MultiTasking versions = 0.1.12...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.13 views

WordPress plugin Mergado Pack 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

4.3CVSS6.5AI score0.00117EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.13 views

PT-2025-54279

Name of the Vulnerable Software and Affected Versions Marcin Kijak Noindex by Path versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in Marcin Kijak Noindex by Path, which also allows Stored Cross-Site Scripting XSS. The issue affects the application's functionality,...

7.1CVSS5.4AI score0.00112EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.12 views

WordPress Depicter plugin <= 4.0.4 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Depicter Slider versions = 4.0.4...

4.3CVSS5.5AI score0.00159EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.8 views

PT-2025-54446

Name of the Vulnerable Software and Affected Versions Themefy Bloggie versions through 2.0.8 Description A Cross-Site Request Forgery CSRF issue exists in Themefy Bloggie, which also allows Reflected Cross-Site Scripting XSS. The vulnerability allows an attacker to potentially perform actions on...

7.1CVSS6AI score0.00106EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.18 views

PT-2025-54384

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through 1.24.1...

4.3CVSS6.8AI score0.00117EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.11 views

PT-2025-54393

Cross-Site Request Forgery CSRF vulnerability in Omid Shamloo Pardakht Delkhah allows Cross Site Request Forgery.This issue affects Pardakht Delkhah: from n/a through 3.0.0...

4.3CVSS6.9AI score0.00144EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.15 views

WordPress plugin Zoho ZeptoMail 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

7.1CVSS6AI score0.00106EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.8 views

WordPress plugin WP Gmail SMTP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site reque...

4.3CVSS6.5AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.12 views

PT-2025-54381

Cross-Site Request Forgery CSRF vulnerability in Manidoraisamy FormFacade allows Cross Site Request Forgery.This issue affects FormFacade: from n/a through 1.4.1...

4.3CVSS6.9AI score0.00117EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.10 views

PT-2025-54396

Cross-Site Request Forgery CSRF vulnerability in Ink themes WP Gmail SMTP allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through 1.0.7...

4.3CVSS6.9AI score0.00144EPSS
SaveExploits0References2
Rows per page
Query Builder