Lucene search
+L

5213 matches found

CNNVD
CNNVD
added 2024/04/06 12:00 a.m.5 views

WordPress Plugin Image Watermark 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.3AI score0.00344EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/06 12:00 a.m.10 views

WordPress Plugin WP-Stateless 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS8.3AI score0.00409EPSS
SaveExploits0References3
NVD
NVD
added 2024/04/02 10:15 a.m.17 views

CVE-2024-1732

The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wadsremoveProductFromShop function in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers...

5.3CVSS5.2AI score0.00397EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/02 9:32 a.m.78 views

CVE-2024-1732

CVE-2024-1732 : The Sharkdropship Dropshipping & Affiliate for AliExpress WordPress plugin is vulnerable to unauthenticated data loss via a missing capability check in wads_removeProductFromShop(), affecting all versions up to 2.2.4. Impact is unauthorized deletion of posts; CVSS indicates networ...

5.3CVSS9.1AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/02 12:00 a.m.12 views

WordPress plugin Product Sort and Display for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.3AI score0.00561EPSS
SaveExploits0References4
Redos
Redos
added 2024/04/01 12:00 a.m.50 views

ROS-20240401-01

Vulnerability of idedmacb function of QEMU hardware emulator is related to synchronization errors when processing the DRQSTAT parameter. Exploitation of the vulnerability could allow an attacker to gain access to read, modify, or delete data or cause a denial of service Vulnerability in the...

10CVSS7.8AI score0.01412EPSS
SaveExploits0
NVD
NVD
added 2024/03/29 6:15 a.m.26 views

CVE-2024-2844

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajaxcancelappointment function in all versions up to, and including, 3.11.18. This makes it possible for unauthenticated attackers to cancel other users orders...

4.3CVSS4.5AI score0.00435EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.5 views

WordPress Plugin Responsive 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS7.8AI score0.00657EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.12 views

WordPress Plugin Easy Appointments 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.2AI score0.00435EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/26 12:00 a.m.8 views

PT-2024-21242 · Dell · Dell Grab For Windows

Name of the Vulnerable Software and Affected Versions: Dell Grab for Windows versions up to and including 5.0.4 Description: The issue allows a local authenticated attacker to potentially exploit Weak Application Folder Permissions, leading to privilege escalation, unauthorized access to...

7.8CVSS6.7AI score0.00127EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/20 6:15 a.m.8 views

CVE-2024-2538

The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajaxsavepermalink' function in all versions up to, and including, 2.4.3.1. This makes it possible for authenticated attackers, with author access and above,...

4.3CVSS7.4AI score0.00568EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.6 views

WordPress Plugin RevivePress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.7AI score0.00419EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.9 views

WordPress Plugin Permalink Manager Lite Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.7AI score0.00568EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.6 views

WordPress Plugin Order Tip for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.4AI score0.00517EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/17 4:15 p.m.7 views

CVE-2024-24867

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics Real Time Traffic.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through 6.9.4...

7.5CVSS7.3AI score0.00453EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/16 12:00 a.m.7 views

WordPress Plugin Word Replacer Pro Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.7AI score0.00444EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 4:15 p.m.8 views

CVE-2024-1127

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bookingexportall function in all versions up to, and including, 3.4.1. This makes it possible for authenticated attackers, with...

4.3CVSS7.3AI score0.0053EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/13 3:26 p.m.25 views

CVE-2024-1843 Auto Affiliate Links <= 6.4.3 - Missing Authorization via aalAddLink

The Auto Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aalAddLink function in all versions up to, and including, 6.4.3. This makes it possible for authenticated attackers, with subscriber access or higher, to add...

4.3CVSS4.8AI score0.00533EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.7 views

WordPress Plugin Bulk Edit Post Titles Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

4.3CVSS6.5AI score0.00428EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.9 views

WordPress Plugin EventPrime Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.0053EPSS
SaveExploits0References4
Rows per page
Query Builder