Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-26048

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00026EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.2 views

CVE-2025-48310

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2025/08/28 1:15 p.m.1 views

CVE-2025-48310

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...

4.3CVSS0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/08/28 12:36 p.m.10 views

CVE-2025-48310

The CVE-2025-48310 CSRF flaw affects the WordPress plugin Table Editor (wp-table-editor) up to version 1.6.4. Public sources include Patchstack/Wordfence entries and CVE records; the vulnerability allows CSRF actions by authenticated users. The Patchstack/Wordfence entries indicate the issue is s...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/28 12:36 p.m.7 views

CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through = 1.6.4...

4.3CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:36 p.m.1 views

CVE-2025-48310 WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wptableeditor Table Editor allows Cross Site Request Forgery. This issue affects Table Editor: from n/a through 1.6.4...

4.3CVSS7.2AI score0.00026EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Table Editor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.00026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.2 views

PT-2025-34999

Name of the Vulnerable Software and Affected Versions: wptableeditor Table Editor versions n/a through 1.6.4 Description: A Cross-Site Request Forgery CSRF issue exists in wptableeditor Table Editor, allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update...

4.3CVSS6.2AI score0.00026EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/08/25 3:45 a.m.3 views

WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Table Editor versions = 1.6.4...

4.3CVSS6.8AI score0.00026EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/01/30 2:15 p.m.3 views

CVE-2024-13661

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditorvtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS7.4AI score0.00132EPSS
Exploits0References3
CVE
CVE
added 2025/01/30 1:41 p.m.38 views

CVE-2024-13661

CVE-2024-13661 affects the WordPress plugin Table Editor (WordPress) up to version 1.5.1, enabling Stored Cross‑Site Scripting (Stored XSS) via the shortcode wptableeditor_vtabs due to insufficient input sanitization and output escaping. Exploitation requires authentication at contributor level o...

6.4CVSS5.7AI score0.00132EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/30 1:41 p.m.5 views

CVE-2024-13661 Table Editor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditorvtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00132EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/30 7:40 a.m.1 views

WordPress Table Editor plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Table Editor versions = 1.5.1...

6.4CVSS5.8AI score0.00132EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.1 views

WordPress plugin Table Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8.2AI score0.00132EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.3 views

PT-2025-2238 · WordPress · Table Editor

Name of the Vulnerable Software and Affected Versions: Table Editor plugin for WordPress versions up to, and including, 1.5.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wptableeditor vtabs' shortcode due to insufficient input sanitization and output escapin...

6.4CVSS8AI score0.00132EPSS
Exploits0References7
Patchstack
Patchstack
added 2024/06/04 12:0 a.m.10 views

WordPress WP-DB-Table-Editor Plugin <= 1.8.4 is vulnerable to Broken Access Control

Software WP-DB-Table-Editor Type Plugin Vulnerable versions = 1.8.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2019 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID d6649cd980cb Credits Francesco Carlucci Required...

7.5CVSS6.6AI score0.00951EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder