Lucene search
+L

22806 matches found

CNNVD
CNNVD
added 2025/07/17 12:00 a.m.15 views

Code-Projects E-Commerce Site 安全漏洞

E-Commerce Site is an e-commerce site. E-Commerce Site suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately verifying that a request is coming from a trusted user. No details of the vulnerability are available at this time...

5.3CVSS5.7AI score0.0026EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.11 views

WordPress plugin Newsletters 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.9 views

WordPress plugin WP Post Hide 跨站请求伪造漏洞

WordPress WP Post Hide is a plugin for controlling the visibility of WordPress posts, hiding the display of specific posts in different locations such as the home page, category pages, and search results pages. WordPress WP Post Hide suffers from a cross-site request forgery vulnerability, which...

4.3CVSS6.7AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.10 views

WordPress plugin Restaurant Menu by MotoPress 跨站请求伪造漏洞

WordPress Restaurant Menu by MotoPress is a menu plugin designed for the restaurant industry that supports free downloads and can be enhanced by adding paid extensions. WordPress Restaurant Menu by MotoPress has a cross-site request forgery vulnerability, the vulnerability stems from the WEB...

5.4CVSS6.8AI score0.00124EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/16 12:00 a.m.16 views

The vulnerability of the Sherpa Orchestrator component of the Sherpa RPA process automation platform allows a hacker to perform a CSRF attack.

The vulnerability of the Sherpa Orchestrator component of the Sherpa RPA process automation platform is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability may allow a remote attacker to carry out a CSRF attack...

5CVSS5.5AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.13 views

WordPress plugin FluentSnippets 跨站请求伪造漏洞

WordPress FluentSnippets is an open source project , mainly used to provide WordPress developers to create custom themes function code snippets . WordPress FluentSnippets suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately verifying that a...

9.6CVSS6.8AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.9 views

WordPress plugin Animator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reque...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.7 views

WordPress plugin Webba Booking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.9 views

WordPress plugin WooCommerce Google Sheet Connector 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.4AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.8 views

WordPress plugin Coupon Affiliates 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS6.5AI score0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.15 views

WordPress plugin FG Drupal to WordPress 代码问题漏洞

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

4.4CVSS6.4AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.8 views

WordPress plugin Wallet System for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in t...

4.3CVSS6.4AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.7 views

WordPress plugin AntiSpam for Contact Form 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS6.4AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.10 views

WordPress plugin Theme Builder For Elementor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS6.5AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.7 views

WordPress plugin Import CDN-Remote Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

7.1CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/15 3:01 a.m.14 views

WordPress hpb seo plugin for WordPress plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin hpb seo plugin for WordPress versions = 3.0.1...

7.1CVSS7AI score0.00118EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/15 12:00 a.m.10 views

Oracle E-Business Suite 跨站请求伪造漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications Framework versions...

5.4CVSS7.2AI score0.00167EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/15 12:00 a.m.9 views

WordPress plugin Restrict File Access 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.1CVSS6.3AI score0.00271EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/07/12 10:18 a.m.12 views

WordPress Evergreen Content Poster plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika in WordPress Plugin Evergreen Content Poster versions = 1.4.5...

4.3CVSS7AI score0.00131EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/07/10 12:00 a.m.12 views

Zoom Client 跨站请求伪造漏洞

Zoom Clients is a multi-platform video conferencing client application developed by Zoom Inc. for video conferencing, online collaboration and other functions. A cross-site scripting vulnerability exists in Zoom Clients, which can be exploited by attackers to cause information leakage...

3.5CVSS5.7AI score0.00228EPSS
SaveExploits0References2
Rows per page
Query Builder