Lucene search
+L

22792 matches found

CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

WordPress plugin GiveWP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.4CVSS6.6AI score0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.9 views

PT-2025-50079

Cross-Site Request Forgery CSRF vulnerability in StellarWP GiveWP give allows Cross Site Request Forgery.This issue affects GiveWP: from n/a through = 4.13.1...

4.5CVSS6.9AI score0.00125EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.10 views

PT-2025-49987

Cross-Site Request Forgery CSRF vulnerability in Badi Jones Duplicate Content Cure duplicate-content-cure allows Cross Site Request Forgery.This issue affects Duplicate Content Cure: from n/a through = 1.0...

6.9AI score0.00159EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

WordPress plugin Media Library Downloader 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

WordPress plugin WP Fast Cache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.4AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.12 views

WordPress plugin WP Hotel Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.4AI score0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.11 views

PT-2025-49888

Name of the Vulnerable Software and Affected Versions vcita Online Booking & Scheduling Calendar for WordPress by vcita versions through 4.5.5 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to potentially perform actions on behalf of an authenticat...

8.8CVSS6.4AI score0.00146EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.8 views

WordPress plugin Advanced Product Fields (Product Addons) for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

4.3CVSS6.2AI score0.00147EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.20 views

WordPress plugin Salon booking system 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.12 views

PT-2025-49887

Name of the Vulnerable Software and Affected Versions Saad Iqbal Quick Contact Form versions through 8.2.5 Description A Cross-Site Request Forgery CSRF issue exists in Quick Contact Form. This allows attackers to perform actions on behalf of an authenticated user without their knowledge...

8.8CVSS6.4AI score0.00124EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

WordPress plugin Ultimate FAQ 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00118EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.9 views

PT-2025-49870

CVE-2025-64256 Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Folio simple-folio allows Cross Site Request Forgery.This issue affects Simple Folio: from n/a t… https://t.co/Cy0kFNJWOf...

8.8CVSS6.8AI score0.00129EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

WordPress plugin UsersWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.6AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

WordPress plugin Chartify 跨站请求伪造漏洞

The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...

4.3CVSS6.8AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.20 views

PT-2025-49879

Cross-Site Request Forgery CSRF vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through = 10.30.3...

8.8CVSS6.9AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.14 views

PT-2025-50032

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a through = 2.2.7...

6.9AI score0.00129EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

OpenBMCS 跨站请求伪造漏洞

OpenBMCS is a building management and control system from OpenBMCS Australia. A cross-site request forgery vulnerability exists in OpenBMCS version 2.4, which stems from a cross-site request forgery issue in the sendFeedback.php endpoint that could lead to the execution of an administrator action...

5.3CVSS6.8AI score0.00189EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.10 views

PT-2025-50010

Cross-Site Request Forgery CSRF vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through = 1.3.47...

6.9AI score0.00128EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.12 views

PT-2025-50244

Name of the Vulnerable Software and Affected Versions STVS ProVision version 5.9.10 Description The software contains a cross-site request forgery issue. This allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests. An attacker can create new...

6.9CVSS6.6AI score0.00195EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-49970

Name of the Vulnerable Software and Affected Versions Business Directory versions through 6.4.19 Description A Cross-Site Request Forgery CSRF issue exists in Strategy11 Team Business Directory business-directory-plugin. This allows attackers to perform actions on behalf of authenticated users...

4.3CVSS6.4AI score0.00117EPSS
SaveExploits0References4
Rows per page
Query Builder