Lucene search
+L

11 matches found

CNVD
CNVD
•added 2025/10/21 12:00 a.m.•15 views

WordPress TARIFFUXX plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress TARIFFUXX plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup of the tariffuxxconfigurator shortcode for user-supplied input, which...

6.5CVSS6.1AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/16 8:33 a.m.•16 views

CVE-2025-10682

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/15 9:15 a.m.•16 views

CVE-2025-10682

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS0.00308EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/15 8:26 a.m.•10 views

CVE-2025-10682 TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/15 8:26 a.m.•33 views

CVE-2025-10682 TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS0.00308EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/15 8:26 a.m.•16 views

EUVD-2025-34535

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/15 8:26 a.m.•45 views

CVE-2025-10682

CVE-2025-10682 affects the TARIFFUXX WordPress plugin (versions

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/10/15 1:02 a.m.•18 views

WordPress TARIFFUXX plugin <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode vulnerability

Authenticated Contributor+ SQL Injection via tariffuxxconfigurator Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin TARIFFUXX versions = 1.4...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•20 views

WordPress plugin TARIFFUXX has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress TARIFFUXX plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup of the tariffuxxconfigurator shortcode for user-supplied input, which...

6.5CVSS6.2AI score0.00308EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•4 views

CVE-2025-10682: Improper Neutralization of Special Elements used in an SQL Command

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS5.8AI score0.00308EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•4 views

PT-2025-42303

Name of the Vulnerable Software and Affected Versions TARIFFUXX plugin for WordPress versions up to and including 1.4 Description The software contains a SQL Injection issue because of inadequate handling of user-provided data within SQL queries. Attackers with Contributor-level access or higher...

6.5CVSS5.6AI score0.00308EPSS
SaveExploits0References8
Rows per page
Query Builder