Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:46 a.m.•11 views

CVE-2025-23806

Cross-Site Request Forgery CSRF vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through = 1.3...

8.1AI score0.00166EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-3438

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/22 3:15 p.m.•13 views

CVE-2025-23806

Cross-Site Request Forgery CSRF vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through = 1.3...

7.1CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•57 views

CVE-2025-23806

CVE-2025-23806 describes a CSRF vulnerability in ThemeFarmer Ultimate Subscribe (ultimate-subscribe) that enables Reflected XSS, affecting Ultimate Subscribe versions up to 1.3. The description and Red Hat entry confirm the cross-site request forgery context and XSS impact; no public exploit deta...

7.1CVSS7.2AI score0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•8 views

CVE-2025-23806 WordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through = 1.3...

7.1CVSS7.2AI score0.00166EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•5 views

PT-2025-5106

Name of the Vulnerable Software and Affected Versions Ultimate Subscribe versions n/a through 1.3 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on a web application tha...

7.1CVSS0.00166EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•4 views

CVE-2025-23806: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through = 1.3...

7.1CVSS5.8AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•17 views

WordPress plugin Ultimate Subscribe 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.1AI score0.00166EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•17 views

WordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Ultimate Subscribe versions = 1.3...

7.1CVSS6.1AI score0.00166EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder