Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-51664

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00106EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:9 a.m.5 views

CVE-2023-47553

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

8.8CVSS8AI score0.00106EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2023/11/23 12:0 a.m.14 views

UserHeat Plugin <= 1.1.6 - Cross-Site Request Forgery

Description The UserHeat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.6. This is due to missing or incorrect nonce validation on the settingPage function. This makes it possible for unauthenticated attackers to modify the plugin's...

8.8CVSS6.5AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2023/11/18 10:15 p.m.16 views

CVE-2023-47553

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

8.8CVSS0.00106EPSS
Exploits0References1
OSV
OSV
added 2023/11/18 10:15 p.m.2 views

CVE-2023-47553

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/18 10:15 p.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

6.8CVSS7.2AI score0.00106EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/18 9:41 p.m.20 views

CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

5.4CVSS8.9AI score0.00106EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/18 9:41 p.m.16 views

CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6...

5.4CVSS7.2AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2023/11/18 9:41 p.m.87 views

CVE-2023-47553

CVE-2023-47553 : CSRF in the WordPress UserHeat Plugin (affecting versions up to 1.1.6). The issue allows unauthorized actions via forged requests and has a fixed version of 1.1.11. No exploitation details are provided in the supplied documents; remediation is to upgrade to 1.1.11 or apply the ve...

8.8CVSS8AI score0.00106EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.1 views

WordPress Plugin UserHeat Plugin Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.6AI score0.00106EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/18 12:0 a.m.3 views

PT-2023-30504 · Unknown · Userheat Plugin

Name of the Vulnerable Software and Affected Versions: UserHeat Plugin versions 1.1.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that t...

8.8CVSS8.5AI score0.00106EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.16 views

WordPress UserHeat Plugin Plugin < 1.1.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software UserHeat Plugin Type Plugin Vulnerable versions 1.1.11 Fixed in 1.1.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47553 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3bac4cc0a295 Credits LEE SE HYOUNG...

8.8CVSS6.5AI score0.00106EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder