Lucene search
+L

3270 matches found

Cvelist
Cvelist
•added 2023/05/30 11:31 p.m.•34 views

CVE-2012-10015 BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

5CVSS8.8AI score0.00433EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/30 12:00 a.m.•18 views

PT-2023-9952 · Bestwebsoft · Bestwebsoft Twitter Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Twitter Plugin versions up to 2.14 Description: A problematic issue has been found, affecting the twttr settings page function of the twitter.php file in the Settings Page component. This issue leads to cross-site request forgery...

8.8CVSS7.1AI score0.00433EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/30 12:00 a.m.•2 views

CVE-2012-10015: Cross-Site Request Forgery (CSRF)

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

8.8CVSS4.9AI score0.00433EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/30 12:00 a.m.•13 views

WordPress Plugin BestWebSoft Twitter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS5.8AI score0.00433EPSS
SaveExploits0References5
OSV
OSV
•added 2023/05/29 1:15 a.m.•12 views

CVE-2022-33974

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/29 1:15 a.m.•35 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

6.8CVSS8.7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/29 12:10 a.m.•12 views

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

5.4CVSS7.1AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/29 12:10 a.m.•70 views

CVE-2022-33974

The CVE-2022-33974 entry concerns the WordPress plugin Smash Balloon Custom Twitter Feeds (Tweets Widget) with versions

8.8CVSS7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/29 12:10 a.m.•46 views

CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

5.4CVSS9.1AI score0.00248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/29 12:00 a.m.•2 views

CVE-2022-33974: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Custom Twitter Feeds Tweets Widget plugin = 1.8.4 versions...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/29 12:00 a.m.•13 views

WordPress Plugin Custom Twitter Feeds 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.3AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/29 12:00 a.m.•16 views

PT-2023-13331 · WordPress · Smash Balloon Custom Twitter Feeds

Name of the Vulnerable Software and Affected Versions: Smash Balloon Custom Twitter Feeds Tweets Widget plugin versions = 1.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.00248EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2023/05/25 1:47 p.m.•38 views

Cynet Protects Hospital From Lethal Infection

A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of the Windows XP a...

7.4AI score
SaveExploits0
Patchstack
Patchstack
•added 2023/05/25 12:00 a.m.•21 views

WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Twitter Feeds Tweets Widget Type Plugin Vulnerable versions = 1.8.4 Fixed in 2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-33974 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ffeee86a1e55 Credits...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
Malwarebytes
Malwarebytes
•added 2023/05/23 10:00 p.m.•16 views

AI generated Pentagon explosion photograph goes viral on Twitter

Twitters recent changes to checkmark verification continue to cause chaos, this time in the realm of potentially dangerous misinformation. A checkmarked account claimed to show images of explosions close to important landmarks like the Pentagon. These images quickly went viral despite being AI...

7.1AI score
SaveExploits0
NVD
NVD
•added 2023/05/23 1:15 p.m.•32 views

CVE-2023-23706

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/23 1:15 p.m.•10 views

CVE-2023-23706

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/23 1:15 p.m.•30 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/23 12:41 p.m.•49 views

CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/23 12:41 p.m.•108 views

CVE-2023-23706

CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder