Lucene search
+L

1038 matches found

Cvelist
Cvelist
added 2022/09/23 3:22 p.m.39 views

CVE-2022-40215 WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities in Tabs plugin = 3.7.1 at WordPress...

3.4CVSS5.6AI score0.00454EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/09/23 3:22 p.m.9 views

CVE-2022-40215 WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities in Tabs plugin = 3.7.1 at WordPress...

3.4CVSS4.5AI score0.00454EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.11 views

WordPress plugin Tabs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS6.2AI score0.00454EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/23 12:00 a.m.10 views

PT-2022-25287 · Tabs · Tabs

Name of the Vulnerable Software and Affected Versions: Tabs plugin versions 3.7.1 and earlier Description: The issue concerns multiple authenticated stored Cross-Site Scripting XSS vulnerabilities. This means that an attacker can inject malicious scripts into the website, which will be executed b...

5.4CVSS5.1AI score0.00454EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
added 2022/09/22 12:00 a.m.12 views

Tabs < 3.7.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow high privilege users to perform Cross-Site Scripting attacks...

5.4CVSS3.4AI score0.00454EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/09/22 12:00 a.m.33 views

WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Vlad Vector Patchstack in the WordPress Tabs plugin versions = 3.7.1. Solution Update the WordPress Tabs plugin to the latest available version at least 3.7.2...

5.4CVSS2.4AI score0.00454EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/07/25 8:15 p.m.21 views

CVE-2022-36375

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

7.2CVSS0.01242EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/25 8:15 p.m.5 views

CVE-2022-36375

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

7.2CVSS5.8AI score0.01242EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/25 8:15 p.m.24 views

Code injection

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

5.8CVSS6.9AI score0.01242EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/07/25 7:50 p.m.6 views

CVE-2022-36375 WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

7.2CVSS7AI score0.01242EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/07/25 7:50 p.m.36 views

CVE-2022-36375 WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability

Authenticated high role user WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin = 3.6.0 at WordPress...

7.2CVSS7.2AI score0.01242EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/25 7:50 p.m.92 views

CVE-2022-36375

CVE-2022-36375 concerns the WordPress Tabs plugin (versions ≤ 3.6.0). The vulnerability allows an authenticated, high-privilege user to change plugin options, as described across multiple sources. The root cause appears to be an insecure options-change flow that can be exploited by someone with e...

7.2CVSS7AI score0.01242EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/07/25 12:00 a.m.36 views

WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability discovered by m0ze Patchstack in WordPress Tabs plugin versions = 3.6.0. Solution Update the WordPress Tabs plugin to the latest available version at least 3.7.0...

7.2CVSS2.8AI score0.01242EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/25 12:00 a.m.12 views

PT-2022-23335 · Biplob Adhikari · Tabs

Name of the Vulnerable Software and Affected Versions: Biplob Adhikari's Tabs plugin versions = 3.6.0 Description: The issue is related to an authenticated WordPress Options Change vulnerability. It affects Biplob Adhikari's Tabs plugin at WordPress, where a high-role user can authenticate and...

7.2CVSS6.7AI score0.01242EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/07/25 12:00 a.m.11 views

WordPress plugin Tabs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.2CVSS7.1AI score0.01242EPSS
SaveExploits0References4
NVD
NVD
added 2022/07/21 5:15 p.m.35 views

CVE-2022-28666

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin = 1.7.7 at WordPress leading to &yikes-the-content-toggle option update...

5.3CVSS0.01359EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/21 5:15 p.m.10 views

CVE-2022-28666

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin = 1.7.7 at WordPress leading to &yikes-the-content-toggle option update...

5.3CVSS5.8AI score0.01359EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/07/21 4:59 p.m.7 views

CVE-2022-28666 WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin = 1.7.7 at WordPress leading to &yikes-the-content-toggle option update...

5.3CVSS5.2AI score0.01359EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/21 4:59 p.m.97 views

CVE-2022-28666

CVE-2022-28666 affects the YIKES Inc. Custom Product Tabs for WooCommerce plugin for WordPress, specifically versions

5.3CVSS5.2AI score0.01359EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/21 12:00 a.m.11 views

WordPress plugin YIKES Inc. Custom Product Tabs for WooCommerce 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists...

5.3CVSS5.7AI score0.01359EPSS
SaveExploits1References4
Rows per page
Query Builder