Lucene search
+L

206 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-36421

Malicious code in bioql PyPI...

9.9CVSS6.4AI score0.01243EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-36977

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00397EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2022-30274

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00432EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/09/22 6:26 p.m.6 views

WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bibek Dhakal in WordPress Plugin MasterStudy LMS versions = 3.6.20...

6.5CVSS6.7AI score0.00207EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/07/30 3:2 p.m.7 views

WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by Bao BlueRock in WordPress Plugin Motors versions = 1.4.80...

5.3CVSS6.7AI score0.00306EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/08 11:58 a.m.10 views

CVE-2025-47586

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

9CVSS5.9AI score0.00582EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/06 12:15 p.m.9 views

CVE-2025-47586

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

9CVSS0.00582EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/06 11:41 a.m.50 views

CVE-2025-47586

CVE-2025-47586 is an unauthenticated Local File Inclusion in the WordPress plugin Motors - Events (versions up to and including 1.4.7). Exploitation arises from improper filename handling in PHP Include/Require, enabling an attacker to trick the application into including local files. Public sour...

9CVSS5.9AI score0.00582EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 11:41 a.m.15 views

CVE-2025-47586 WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

9CVSS0.00582EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 11:41 a.m.8 views

CVE-2025-47586 WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

9CVSS5.3AI score0.00582EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.6 views

PT-2025-24086 · Stylemixthemes · Motors - Events

Name of the Vulnerable Software and Affected Versions: StylemixThemes Motors - Events versions 1.4.7 and earlier Description: The issue affects the Motors - Events plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also know...

9CVSS9AI score0.00582EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 10:39 a.m.11 views

CVE-2024-47344

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue affects uListing: from n/a through = 2.1.5...

5.3CVSS5.9AI score0.00367EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:9 a.m.10 views

CVE-2023-50852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3...

7.6CVSS7.8AI score0.0053EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.24 views

CVE-2023-46208

Unauth. Reflected Cross-Site Scripting XSS vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin = 1.4.6 versions...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.8 views

CVE-2023-46207

Server-Side Request Forgery SSRF vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifieds & Listing: from n/a through 1.4.6...

7.5CVSS7.8AI score0.00506EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:37 a.m.13 views

CVE-2023-35093

Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin = 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more...

6.5CVSS6.7AI score0.00555EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:4 a.m.7 views

CVE-2023-37385

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting allows PHP Local File Inclusion.This issue affects Consulting: from n/a through 6.5.6...

7.3CVSS6.9AI score0.00503EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 1:24 a.m.7 views

CVE-2022-43472

Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6...

4.3CVSS8.5AI score0.00552EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:55 a.m.13 views

CVE-2022-38356

Cross-Site Request Forgery CSRF vulnerability in StylemixThemes WordPress Header Builder Plugin – Pearl plugin = 1.3.4 versions...

8.8CVSS7AI score0.00264EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 12:51 a.m.8 views

CVE-2022-45815

Cross-Site Request Forgery CSRF vulnerability in StylemixThemes GDPR Compliance & Cookie Consent plugin = 1.2 versions...

8.8CVSS7.1AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder