Lucene search
+L

1492 matches found

Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•12 views

CVE-2023-27626 WordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker stock-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through = 3.23.0...

5.3CVSS5.8AI score0.00398EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:31 a.m.•52 views

CVE-2023-27626

The CVE concerns WordPress Stock Ticker plugin versions

5.3CVSS5.1AI score0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•2 views

PT-2024-12143

Name of the Vulnerable Software and Affected Versions Aleksandar Urošević Stock Ticker versions 3.23.0 and earlier Description The issue is related to missing authorization, allowing exploitation due to incorrectly configured access control security levels. Recommendations For versions 3.23.0 and...

5.3CVSS0.00398EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

WordPress plugin Stock Ticker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.8AI score0.00398EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•3 views

CVE-2023-27626: Missing Authorization

Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through 3.23.0...

5.3CVSS5.9AI score0.00398EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 2:15 p.m.•19 views

CVE-2024-53754

Cross-Site Request Forgery CSRF vulnerability in IrishCathal Out Of Stock Badge out-of-stock-badge allows Cross Site Request Forgery.This issue affects Out Of Stock Badge: from n/a through = 2.0...

7.1CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•54 views

CVE-2024-53754

CVE-2024-53754 is a CSRF to Stored XSS vulnerability in the WordPress plugin Out Of Stock Badge (Arrow Design). Public details indicate the issue affects versions up to 1.3.1. Multiple connected sources reiterate the CSRF to Stored XSS vector but do not provide a confirmed exploit sample or patch...

7.1CVSS7.2AI score0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•11 views

CVE-2024-53754 WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IrishCathal Out Of Stock Badge out-of-stock-badge allows Cross Site Request Forgery.This issue affects Out Of Stock Badge: from n/a through = 2.0...

7.1CVSS7.2AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•30 views

CVE-2024-53754 WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IrishCathal Out Of Stock Badge out-of-stock-badge allows Cross Site Request Forgery.This issue affects Out Of Stock Badge: from n/a through = 2.0...

7.1CVSS0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•5 views

PT-2024-35864

Name of the Vulnerable Software and Affected Versions Out Of Stock Badge versions 1.3.1 and earlier Description The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user into performing unintended action...

7.1CVSS0.00149EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•18 views

WordPress plugin Out Of Stock Badge 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.6AI score0.00149EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•6 views

CVE-2024-53754: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in IrishCathal Out Of Stock Badge out-of-stock-badge allows Cross Site Request Forgery.This issue affects Out Of Stock Badge: from n/a through = 2.0...

7.1CVSS5.8AI score0.00149EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/28 12:35 p.m.•12 views

WordPress Out Of Stock Badge plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO in WordPress Plugin Out Of Stock Badge versions = 2.0...

7.1CVSS7AI score0.00149EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•11 views

kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

A null pointer dereference exists in the linux kernel such that in objstockflushrequired:stock-cachedobjcg can be reset between the check and dereference, resulting in damage to the availability of the system...

4.7CVSS7.3AI score0.00138EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•5 views

CVE-2024-43134: Missing Authorization

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

4.3CVSS5.9AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•21 views

PT-2024-30323 · WordPress · Waitlist Woocommerce

Name of the Vulnerable Software and Affected Versions: Waitlist Woocommerce Back in stock notifier versions n/a through 2.6 Description: The issue affects the Waitlist Woocommerce Back in stock notifier plugin due to a Missing Authorization vulnerability. This vulnerability allows exploitation of...

4.3CVSS6.5AI score0.00337EPSS
SaveExploits0References3
NVD
NVD
•added 2024/10/16 2:15 p.m.•43 views

CVE-2024-49227

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/16 1:17 p.m.•57 views

CVE-2024-49227 WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/16 1:17 p.m.•15 views

CVE-2024-49227 WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in foter Free Stock Photos Foter free-stock-photos-foter allows Object Injection.This issue affects Free Stock Photos Foter: from n/a through = 1.5.4...

9.8CVSS5.2AI score0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/16 1:17 p.m.•87 views

CVE-2024-49227

CVE-2024-49227 describes a PHP object injection through deserialization in the WordPress plugin “Free Stock Photos Foter” (versions

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
Rows per page
Query Builder