Lucene search
+L

118 matches found

Patchstack
Patchstack
added 2024/08/07 10:1 a.m.5 views

WordPress WP Table Builder plugin <= 1.4.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin WP Table Builder versions = 1.4.15...

6.5CVSS6.1AI score0.00294EPSS
Exploits0Affected Software1
WPVulnDB
WPVulnDB
added 2024/06/05 12:0 a.m.15 views

Ninja Tables – Easiest Data Table Builder < 5.0.10 - Authenticated (Admin+) Server-Side Request Forgery

Description The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.9. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary...

4.9CVSS9.2AI score0.00243EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/21 9:31 a.m.24 views

CVE-2024-4700 WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button element in all versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

6.4CVSS5.9AI score0.00329EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/05/21 9:31 a.m.12 views

CVE-2024-4700 WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button element in all versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

6.4CVSS5.8AI score0.00329EPSS
Exploits0References4
CVE
CVE
added 2024/05/21 9:31 a.m.68 views

CVE-2024-4700

The WP Table Builder – WordPress Table Plugin is vulnerable to Stored Cross-Site Scripting in all versions up to and including 1.4.14 due to insufficient input sanitization and output escaping. This allows authenticated attackers to inject web scripts that execute when a page is loaded. By defaul...

6.4CVSS5.7AI score0.00329EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2024/05/21 3:43 a.m.6 views

WordPress WP Table Builder plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin WP Table Builder versions = 1.4.14...

6.4CVSS5.7AI score0.00329EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/21 12:0 a.m.4 views

WordPress Plugin wp-table-builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.7AI score0.00329EPSS
Exploits0References5
WPVulnDB
WPVulnDB
added 2024/05/20 12:0 a.m.15 views

WP Table Builder – WordPress Table Plugin < 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button element in all versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00329EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/01/05 10:15 a.m.21 views

CVE-2023-51673

Cross-Site Request Forgery CSRF vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from n/a through 7.0.17...

9.8CVSS6.6AI score0.00249EPSS
Exploits0References1
OSV
OSV
added 2024/01/05 10:15 a.m.8 views

CVE-2023-51673

Cross-Site Request Forgery CSRF vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from n/a through 7.0.17...

9.8CVSS5.8AI score0.00249EPSS
Exploits0References1
Prion
Prion
added 2024/01/05 10:15 a.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from n/a through 7.0.17...

7.5CVSS7.4AI score0.00249EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/05 9:54 a.m.33 views

CVE-2023-51673 WordPress Stylish Price List Plugin <= 7.0.17 is vulnerable to Broken Access Control

Cross-Site Request Forgery CSRF vulnerability in Designful Stylish Price List – Price Table Builder & QR Code Restaurant Menu.This issue affects Stylish Price List – Price Table Builder & QR Code Restaurant Menu: from n/a through 7.0.17...

5.4CVSS9.7AI score0.00249EPSS
Exploits0References1
CVE
CVE
added 2024/01/05 9:54 a.m.46 views

CVE-2023-51673

CVE-2023-51673 concerns Cross-Site Request Forgery in the Stylish Price List – Price Table Builder & QR Code Restaurant Menu WordPress plugin (affected: from n/a through 7.0.17). The issue is a CSRF flaw (no details on exploit path beyond CSRF) that could enable unauthorized actions by a logged-i...

9.8CVSS8.6AI score0.00249EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.14 views

WordPress WordPress Table Builder – TableGenie Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Table Builder – TableGenie Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b273f3c6ae09 Credits Rafie Muhamma...

6.4AI score0.00325EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/06/05 2:15 p.m.20 views

CVE-2023-0900

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins...

7.2CVSS7.3AI score0.03229EPSS
Exploits2References1
OSV
OSV
added 2023/06/05 2:15 p.m.5 views

CVE-2023-0900

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins...

7.2CVSS7.3AI score0.03229EPSS
Exploits2References1
Prion
Prion
added 2023/06/05 2:15 p.m.18 views

Sql injection

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins...

5.8CVSS7.2AI score0.03229EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/05 1:39 p.m.7 views

CVE-2023-0900 AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins...

7.3AI score0.03229EPSS
Exploits2References1
CVE
CVE
added 2023/06/05 1:39 p.m.89 views

CVE-2023-0900

The CVE-2023-0900 issue affects the Pricing Table Builder WordPress plugin (versions 1.1.6 and earlier). A parameter used in a SQL statement is not properly sanitized/escaped, enabling SQL injection. The vulnerability can be exploited by high-privilege administrators (admin) to access database co...

7.2CVSS7.4AI score0.03229EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2023/06/05 12:0 a.m.8 views

WordPress Plugin Pricing Table Builder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Pricing Table Builder 1.1....

7.2CVSS7.7AI score0.03229EPSS
Exploits2References2
Rows per page
Query Builder