Lucene search
+L

22799 matches found

CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin Stock Message 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.8 views

PT-2025-38833

Name of the Vulnerable Software and Affected Versions Damian BP Disable Activation Reloaded versions through 1.2.1 Description A Cross-Site Request Forgery issue exists in Damian BP Disable Activation Reloaded. The issue involves accessing functionality that is not properly constrained by Access...

6.5CVSS6.5AI score0.00161EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.10 views

WordPress plugin WorkScout-Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

8.8CVSS6.5AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin WPMK PDF Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin...

7.1CVSS6AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.11 views

PT-2025-38978

Name of the Vulnerable Software and Affected Versions ptibogxiv Doliconnect versions through 9.5.7 Description A Cross-Site Request Forgery CSRF issue exists in ptibogxiv Doliconnect, which also allows Stored Cross-Site Scripting XSS. This allows an attacker to potentially perform actions on beha...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.9 views

PT-2025-38901

Name of the Vulnerable Software and Affected Versions Mayo Moriyama Force Update Translations versions through 0.5 Description A Cross-Site Request Forgery CSRF issue exists in Force Update Translations. This allows attackers to perform actions on behalf of unsuspecting users. The issue allows...

4.3CVSS6.3AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.16 views

PT-2025-38913

Name of the Vulnerable Software and Affected Versions ApusTheme Findgo versions through 1.3.55 Description ApusTheme Findgo is susceptible to a Cross-Site Request Forgery issue that can lead to Authentication Bypass. This allows an attacker to perform actions on behalf of an authenticated user...

8.8CVSS6.5AI score0.00188EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.10 views

PT-2025-38842

Name of the Vulnerable Software and Affected Versions InterServer Mail Baby SMTP versions through 2.8 Description A Cross-Site Request Forgery CSRF issue exists in InterServer Mail Baby SMTP. This allows attackers to perform actions on behalf of authenticated users. The issue allows Cross Site...

4.3CVSS6.2AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38884

Name of the Vulnerable Software and Affected Versions Bage Flexible FAQ versions through 0.2 Description A Cross-Site Request Forgery CSRF issue exists in Bage Flexible FAQ. This allows for the execution of unwanted actions on behalf of an authenticated user. Recommendations At the moment, there ...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin Bage Flexible FAQ 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.8 views

WordPress plugin AgreeMe Checkboxes For WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin WP Content Protection 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS6AI score0.00127EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

WordPress plugin Emergency Password Reset 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin Double the Donation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.9 views

WordPress plugin ShrinkTheWeb (STW) Website Previews 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plug...

7.1CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.9 views

PT-2025-38784

Name of the Vulnerable Software and Affected Versions Aurélien LWS LWS Affiliation versions through 2.3.6 Description A Cross-Site Request Forgery CSRF issue exists in Aurélien LWS LWS Affiliation. This allows for the execution of unwanted actions on behalf of an authenticated user. The issue...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.6 views

WordPress plugin LIJE Show Pages List 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plug...

4.3CVSS6.2AI score0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.8 views

PT-2025-38883

Name of the Vulnerable Software and Affected Versions Fastly versions n/a through 1.2.28 Description A Cross-Site Request Forgery issue exists in Fastly. This allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations Update Fastly to a version...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.7 views

PT-2025-38964

Name of the Vulnerable Software and Affected Versions extendyourweb HORIZONTAL SLIDER versions through 2.4 Description A Cross-Site Request Forgery CSRF issue exists in extendyourweb HORIZONTAL SLIDER, which also allows Stored Cross-Site Scripting XSS. The issue impacts the application's ability ...

7.1CVSS5.4AI score0.00127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.8 views

PT-2025-38975

Name of the Vulnerable Software and Affected Versions WP CMS Ninja Current Age Plugin versions through 1.6 Description A Cross-Site Request Forgery CSRF issue exists in WP CMS Ninja Current Age Plugin, which also allows Stored Cross-Site Scripting XSS. Recommendations Update WP CMS Ninja Current...

7.1CVSS5.6AI score0.00127EPSS
SaveExploits0References3
Rows per page
Query Builder