Lucene search
+L

52 matches found

NVD
NVD
•added 2026/06/04 11:16 a.m.•27 views

CVE-2026-49077

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS0.0033EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•1 views

CVE-2026-49077: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•50 views

PT-2026-46181

Name of the Vulnerable Software and Affected Versions WP eMember versions prior to 10.2.3 Description An issue in the software allows the retrieval of embedded sensitive system information by an unauthorized control sphere. Recommendations Update to a version later than 10.2.2...

5.3CVSS5.5AI score0.0033EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/03/26 3:07 p.m.•16 views

CVE-2026-28070

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS5.2AI score0.00313EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/19 6:16 a.m.•16 views

CVE-2026-28070

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/19 5:20 a.m.•8 views

CVE-2026-28070 WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS6AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•2 views

CVE-2026-28073: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•2 views

CVE-2026-28070: Missing Authorization

Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2...

5.3CVSS5.9AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-26820

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00271EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-49938

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00246EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-52353

Malicious code in bioql PyPI...

8.2CVSS9AI score0.00525EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-26814

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:46 a.m.•14 views

CVE-2023-22691

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...

8.8CVSS7.1AI score0.00271EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:45 a.m.•16 views

CVE-2023-22685

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:10 a.m.•19 views

CVE-2023-48286

Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through = 2.0.79...

8.2CVSS7.3AI score0.00525EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:52 p.m.•16 views

CVE-2022-47163

Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress plugin = 2.6 versions...

7.5CVSS7AI score0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:24 p.m.•10 views

CVE-2025-24663 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...

7.6CVSS7.2AI score0.00585EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•20 views

CVE-2023-48286

Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through = 2.0.79...

8.2CVSS0.00525EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/04 11:15 a.m.•28 views

CVE-2023-48285

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79...

5.3CVSS5.4AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•3 views

CVE-2023-48285: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79...

5.3CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder