Lucene search
+L

39 matches found

CNNVD
CNNVD
added 2024/04/18 12:0 a.m.10 views

WordPress Plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00314EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/16 3:40 p.m.9 views

WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WP Smart Import versions = 1.0.7...

5.9CVSS6.1AI score0.00314EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2024/03/27 6:13 a.m.22 views

CVE-2024-30201 WordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This issue affects WordPress Importer: from n/a through 1.0.4...

7.1CVSS7.1AI score0.00397EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.7 views

WordPress Plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
added 2022/12/06 3:15 p.m.22 views

CVE-2022-40209

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Xylus Themes WP Smart Import plugin = 1.0.2 on WordPress...

6.1CVSS0.00406EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/06 3:15 p.m.8 views

CVE-2022-40209

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Xylus Themes WP Smart Import plugin = 1.0.2 on WordPress...

6.1CVSS5.8AI score0.00406EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/06 3:15 p.m.18 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Xylus Themes WP Smart Import plugin = 1.0.2 on WordPress...

5.8CVSS6AI score0.00406EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/12/06 2:54 p.m.66 views

CVE-2022-40209

The CVE-2022-40209 entry describes an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Xylus Themes WP Smart Import (WordPress) affecting version

6.1CVSS6AI score0.00406EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2022/12/06 12:0 a.m.26 views

WP Smart Import < 1.0.3 - Reflected Cross-Ste Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.9AI score0.00406EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/12/06 12:0 a.m.10 views

WordPress plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS5.9AI score0.00406EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/06 12:0 a.m.8 views

PT-2022-25284 · Xylus Themes · Xylus Themes Wp Smart Import

Name of the Vulnerable Software and Affected Versions: Xylus Themes WP Smart Import plugin versions 1.0.2 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability affects the Xylus Themes WP Smart Import plugin on WordPress,...

6.1CVSS6AI score0.00406EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/07/09 12:0 a.m.10 views

WordPress Server-Side Request Forgery Vulnerability (CNVD-2021-59060)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in the WordPress wp-smart-import plugin. No...

9.1CVSS6.9AI score0.01612EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/07 2:15 p.m.8 views

CVE-2020-24147

Server-side request forgery SSR vulnerability in the WP Smart Import wp-smart-import plugin 1.0.0 for WordPress via the file field...

9.1CVSS5.8AI score0.01612EPSS
SaveExploits0References2
NVD
NVD
added 2021/07/07 2:15 p.m.25 views

CVE-2020-24147

Server-side request forgery SSR vulnerability in the WP Smart Import wp-smart-import plugin 1.0.0 for WordPress via the file field...

9.1CVSS0.01612EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/07 2:15 p.m.23 views

Server side request forgery (ssrf)

Server-side request forgery SSR vulnerability in the WP Smart Import wp-smart-import plugin 1.0.0 for WordPress via the file field...

6.4CVSS9.2AI score0.01612EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/07/07 1:39 p.m.50 views

CVE-2020-24147

The CVE-2020-24147 entry describes a Server-Side Request Forgery (SSRF) in the WordPress WP Smart Import plugin, version 1.0.0, exploitable via the file field. The issue is documented as affecting WP Smart Import 1.0.0 and is mitigated by upgrading to a newer version (e.g., 1.0.1+), per multiple ...

9.1CVSS9.2AI score0.01612EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/07/07 12:0 a.m.10 views

PT-2021-11018 · WordPress · Wp Smart Import

Name of the Vulnerable Software and Affected Versions: WP Smart Import plugin version 1.0.0 Description: A server-side request forgery SSRF issue exists in the WP Smart Import plugin for WordPress. This issue is related to the file field. Recommendations: For WP Smart Import plugin version 1.0.0,...

9.1CVSS9.1AI score0.01612EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/07/07 12:0 a.m.9 views

WordPress 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in the WordPress wp-smart-import plugin. No...

9.1CVSS5.6AI score0.01612EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2021/04/13 12:0 a.m.37 views

WP Smart Import < 1.0.1 - Auhenticated Server-side Request Forgery

The plugin is affected by an authenticated server-side request forgery SSRF vulnerability in versions before 1.0.1...

6.4CVSS4.3AI score0.01612EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder