Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/11/21 6:28 a.m.6 views

CVE-2025-12502

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

6.8CVSS7.9AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/20 3:30 p.m.3 views

EUVD-2025-198272

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

6.8CVSS7.3AI score0.00026EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/20 6:0 a.m.7 views

CVE-2025-12502 Attention Bar <= 0.7.2.1 - Admin+ SQLi

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/20 6:0 a.m.3 views

CVE-2025-12502 Attention Bar <= 0.7.2.1 - Admin+ SQLi

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

7.4AI score0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.3 views

PT-2025-47556

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

7.9AI score0.00026EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/20 12:0 a.m.1 views

WordPress plugin Attention Bar 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

6.8CVSS7.5AI score0.00026EPSS
Exploits0References1
OSV
OSV
added 2009/06/27 6:47 p.m.1 views

DEBIAN-CVE-2008-6838

Cross-site scripting XSS vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the off parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.8AI score0.01334EPSS
Exploits1References1
Rows per page
Query Builder