Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-50837

Malicious code in bioql PyPI...

4.3CVSS8.9AI score0.00128EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:26 a.m.7 views

CVE-2024-12414

The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...

4.3CVSS6.4AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2024/12/13 9:15 a.m.10 views

CVE-2024-12414

The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...

4.3CVSS0.00128EPSS
Exploits0References3
OSV
OSV
added 2024/12/13 9:15 a.m.1 views

CVE-2024-12414

The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...

4.3CVSS5.6AI score0.00128EPSS
Exploits0References3
CVE
CVE
added 2024/12/13 8:24 a.m.49 views

CVE-2024-12414

CVE-2024-12414 affects Themify Store Locator for WordPress (versions up to 1.1.9). Root cause: missing/incorrect nonce validation in setting_page(), enabling Cross‑Site Request Forgery. Attack: unauthenticated attacker can induce an admin to perform forged requests to modify plugin settings. Impa...

4.3CVSS4.3AI score0.00128EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/13 8:24 a.m.9 views

CVE-2024-12414 Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery

The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...

4.3CVSS6.4AI score0.00128EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/13 8:24 a.m.17 views

CVE-2024-12414 Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery

The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...

4.3CVSS0.00128EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.2 views

WordPress plugin Themify Store Locator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS8.5AI score0.00128EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/12/12 9:33 p.m.3 views

WordPress Themify Store Locator plugin <= 1.1.9 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Peter Thaleikis in WordPress Plugin Themify Store Locator versions = 1.1.9...

4.3CVSS7AI score0.00128EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder