Lucene search
+L

580 matches found

Cvelist
Cvelist
added 2023/11/18 9:35 p.m.20 views

CVE-2023-47556 WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in James Mehorter Device Theme Switcher.This issue affects Device Theme Switcher: from n/a through 3.0.2...

4.3CVSS8.9AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/18 9:35 p.m.15 views

CVE-2023-47556 WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in James Mehorter Device Theme Switcher.This issue affects Device Theme Switcher: from n/a through 3.0.2...

4.3CVSS7.2AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/18 9:35 p.m.97 views

CVE-2023-47556

CVE-2023-47556 is a CSRF vulnerability in the WordPress plugin Device Theme Switcher, affected versions

8.8CVSS8AI score0.00294EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.4 views

WordPress Plugin Plugin Name: Device Theme Switcher Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.4AI score0.00294EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.9 views

WordPress Plugin Name: Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Plugin Name: Device Theme Switcher Type Plugin Vulnerable versions = 3.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47556 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f206c5d29e7d Credits...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/08/11 1:15 a.m.24 views

CVE-2023-37512

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

5.5CVSS4.4AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/11 1:15 a.m.6 views

CVE-2023-37513

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

5.5CVSS5.8AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/11 1:15 a.m.7 views

CVE-2023-37512

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

5.5CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/11 12:34 a.m.22 views

CVE-2023-37512 HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

3.3CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/11 12:34 a.m.16 views

CVE-2023-37512 HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

3.3CVSS6.8AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/11 12:25 a.m.24 views

CVE-2023-37513 HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

3.3CVSS5.8AI score0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/11 12:25 a.m.24 views

CVE-2023-37513 HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information...

3.3CVSS6.8AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/11 12:0 a.m.10 views

HCL Technologies Traveler To Do Security Vulnerability

HCL Technologies Traveler is a software from HCL Technologies, USA. It is used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. A security vulnerability exists in HCL Technologies Traveler To Do, which originates from the...

5.5CVSS6.3AI score0.00166EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/09 6:16 a.m.4 views

CVE-2023-2557

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS6.8AI score0.00409EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/09 6:16 a.m.12 views

CVE-2023-2558

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcscurrentcurrency shortcode in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS5.7AI score0.00365EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/09 6:16 a.m.5 views

CVE-2023-2558

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcscurrentcurrency shortcode in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

6.4CVSS7AI score0.00365EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/09 6:16 a.m.13 views

CVE-2023-2557

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS4.4AI score0.00409EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/09 6:16 a.m.8 views

CVE-2023-2557

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS6.7AI score0.00409EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/09 6:16 a.m.3 views

CVE-2023-2558

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcscurrentcurrency shortcode in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This...

5.4CVSS6.8AI score0.00365EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/09 6:16 a.m.3 views

CVE-2023-2555

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS6.8AI score0.00434EPSS
SaveExploits0References3
Rows per page
Query Builder