Lucene search
+L

535 matches found

CNNVD
CNNVD
added 2023/11/22 12:0 a.m.5 views

WordPress Plugin Community by PeepSo - Social Network, Membership, Registration, User Profiles Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS6.4AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/18 10:15 p.m.5 views

CVE-2023-47644

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

8.8CVSS7.3AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/18 10:15 p.m.30 views

CVE-2023-47644

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

8.8CVSS0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 10:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

6.8CVSS7.2AI score0.0028EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/18 9:31 p.m.67 views

CVE-2023-47644

The CVE-2023-47644 entry is valid and affects the WordPress plugin ProfileGrid – User Profiles, Memberships, Groups and Communities (v5.6.6 and earlier). It is a Cross-Site Request Forgery (CSRF) vulnerability with unauthenticated impact. The issue stems from CSRF protection gaps in ProfileGrid, ...

8.8CVSS8AI score0.0028EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.5 views

WordPress Plugin ProfileGrid - User Profiles, Memberships, Groups and Communities Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.0028EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/18 12:0 a.m.11 views

PT-2023-30532 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Memberships, Groups and Communities versions 5.6.6 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user...

8.8CVSS8.6AI score0.0028EPSS
SaveExploits0References4
NVD
NVD
added 2023/11/13 2:15 a.m.32 views

CVE-2023-47669

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

8.8CVSS0.00254EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 2:15 a.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

6.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/13 12:55 a.m.35 views

CVE-2023-47669 WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

5.4CVSS9AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/13 12:55 a.m.60 views

CVE-2023-47669

CVE-2023-47669 is a CSRF vulnerability in the WordPress plugin “User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor” by Cozmoslabs, affecting versions prior to 3.10.3. The issue allows cross-site request forgery without authentication (per Patchstack/CVE rec...

8.8CVSS7AI score0.00254EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/11/09 11:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin = 6.0.9.0 versions...

6.8CVSS7.2AI score0.00331EPSS
SaveExploits0References1Affected Software1
Metasploit
Metasploit
added 2023/11/09 7:51 p.m.317 views

Windows Gather PL/SQL Developer Connection Credentials

This module can decrypt the histories and connection credentials of PL/SQL Developer, and passwords are available if the user chooses to remember. Module Options msf use post/windows/gather/credentials/plsqldeveloper msf postplsqldeveloper show actions ...actions... msf postplsqldeveloper set...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/11/09 12:0 a.m.6 views

WordPress Plugin Community by PeepSo - Social Network, Membership, Registration, User Profiles Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Community by PeepSo - Social Network,...

8.8CVSS6.5AI score0.00331EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/25 5:9 p.m.30 views

CVE-2023-37909 Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, any user who can edit their own user profile can execute arbitrary script macros including Groovy and Python macros th...

9.9CVSS8.9AI score0.01621EPSS
SaveExploits1References5
Hacker One
Hacker One
added 2023/10/18 4:23 a.m.25 views

U.S. Dept Of Defense: IDOR to delete profile images in https:███████

A vulnerability was discovered in which profile images could be deleted through a GET request by supplying a user ID. This allowed unauthorized deletion of user profile images...

7AI score
SaveExploits0
Prion
Prion
added 2023/10/16 10:15 p.m.22 views

Design/Logic Flaw

Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hideuserprofilesfrompublic is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no know...

5CVSS5.2AI score0.0041EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.7 views

Discourse Information Disclosure Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from an information disclosure vulnerability that originates from allowing unauthorized attackers to access user profiles via hideuserprofilesfrompublic...

5.3CVSS6.2AI score0.0041EPSS
SaveExploits0References2
Citrix
Citrix
added 2023/09/05 12:0 a.m.8 views

Locally cached profiles not getting deleted at User logoff from the VDA

Locally cached user profiles does not get deleted at user logoff. User gets a temp profile at next consecutive login...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2023/08/31 12:0 a.m.9 views

HOW TO | New network printers are not saving after re-logon

• The users are able to connect and add their network printers to their VDI sessions. However, after logoff the printer settings are not being retained within the user profile. • We would like to retain the network printer within the profile so that it is available for all subsequent logins...

7.1AI score
SaveExploits0
Rows per page
Query Builder