Lucene search
+L

5844 matches found

CVE
CVE
added 2024/02/08 1:06 p.m.65 views

CVE-2024-24871

CVE-2024-24871 affects the WordPress Blocksy Theme up to version 2.0.19. The issue is a Stored XSS caused by improper neutralization of input during web page generation. Impact is described as low severity (CVSS ~6.5) with network attack vector, low attack complexity, privileges required: LOW, an...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/05 9:22 p.m.40 views

CVE-2024-0668 Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action

The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.3 via deserialization of untrusted input in the 'processbulkaction' function. This makes it possible for authenticated attacker, with administrator access and above, ...

6.6CVSS7.3AI score0.01139EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/02/05 12:00 a.m.20 views

WordPress Blocksy Theme <= 2.0.19 is vulnerable to Cross Site Scripting (XSS)

Software Blocksy Type Theme Vulnerable versions = 2.0.19 Fixed in 2.0.20 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24871 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID 07c604dd56fb Credits savphill Required privilege Editor Published ...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/01/31 2:15 p.m.7 views

CVE-2024-22136

Cross-Site Request Forgery CSRF vulnerability in DroitThemes Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder.This issue affects Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder: from n/a through 3.1.5...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/19 3:15 p.m.20 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...

7.5CVSS7.3AI score0.00999EPSS
SaveExploits0References15Affected Software15
Wordfence Blog
Wordfence Blog
added 2024/01/18 2:52 p.m.75 views

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 8, 2024 to January 14, 2024)

Wordfence just launched its bug bounty program. For the first 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Last week, there were 67 vulnerabilities disclosed in 60 WordPress Plugins and no WordPress themes that have been added to the Wordfence...

7.5CVSS9.2AI score0.90339EPSS
SaveExploits15
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.16 views

The vulnerability of Themes component in the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Themes component in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

4.7CVSS6.3AI score0.00587EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.12 views

The vulnerability of Themes component in the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Themes component in the Windows operating system is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

7.8CVSS6.9AI score0.22773EPSS
SaveExploits1References2
Wallarm Lab
Wallarm Lab
added 2024/01/15 9:34 a.m.31 views

What is Kafka?

Introduction to the Universe of Kafka: A Detailed Synopsis Apache Kafka, frequently just labeled as Kafka, is a universally contributed event broadcasting framework, intended to manage live streaming of data. It is engineered to be a bridge for significant volumes of data, offering a mechanism fo...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/01/10 12:00 a.m.36 views

Microsoft Windows Multiple Vulnerabilities (KB5034119)

This host is missing an important security update according to Microsoft KB5034119 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS6.9AI score0.22773EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2024/01/10 12:00 a.m.45 views

Microsoft Windows Multiple Vulnerabilities (KB5034127)

This host is missing an important security update according to Microsoft KB5034127 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.3AI score0.22773EPSS
SaveExploits6References1
OpenVAS
OpenVAS
added 2024/01/10 12:00 a.m.104 views

Microsoft Windows Multiple Vulnerabilities (KB5034121)

This host is missing an important security update according to Microsoft KB5034121 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.3AI score0.22773EPSS
SaveExploits7References1
OpenVAS
OpenVAS
added 2024/01/10 12:00 a.m.100 views

Microsoft Windows Multiple Vulnerabilities (KB5034122)

This host is missing an important security update according to Microsoft KB5034122 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.4AI score0.22773EPSS
SaveExploits9References1
NVD
NVD
added 2024/01/09 6:15 p.m.27 views

CVE-2024-21320

Windows Themes Spoofing Vulnerability...

6.5CVSS7.3AI score0.22773EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/09 6:15 p.m.1 views

CVE-2024-21320

Windows Themes Spoofing Vulnerability...

6.5CVSS7.3AI score0.22773EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/09 6:15 p.m.7 views

CVE-2024-20691

Windows Themes Information Disclosure Vulnerability...

4.7CVSS7.3AI score0.00587EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/09 6:15 p.m.22 views

CVE-2024-20691

Windows Themes Information Disclosure Vulnerability...

4.7CVSS6.1AI score0.00587EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/09 6:15 p.m.30 views

Information disclosure

Windows Themes Information Disclosure Vulnerability...

1CVSS6.7AI score0.00587EPSS
SaveExploits0References1Affected Software10
Prion
Prion
added 2024/01/09 6:15 p.m.27 views

Spoofing

Windows Themes Spoofing Vulnerability...

4.3CVSS6.9AI score0.22773EPSS
SaveExploits1References1Affected Software12
Cvelist
Cvelist
added 2024/01/09 5:57 p.m.42 views

CVE-2024-21320 Windows Themes Spoofing Vulnerability

...

6.5CVSS7.6AI score0.22773EPSS
SaveExploits1References1
Rows per page
Query Builder