Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin Login/Signup Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

5.9CVSS5.7AI score0.0017EPSS
Exploits0References1
OSV
OSV
added 2025/01/02 1:15 p.m.0 views

CVE-2024-39623

Cross-Site Request Forgery CSRF vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4...

8.8CVSS5.8AI score0.00139EPSS
Exploits0References1
OSV
OSV
added 2024/08/29 3:15 p.m.0 views

CVE-2024-38795

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CridioStudio ListingPro allows SQL Injection.This issue affects ListingPro: from n/a through 2.9.4...

9.8CVSS5.8AI score0.00725EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.3 views

PT-2024-28557 · Unknown · Listingpro

Name of the Vulnerable Software and Affected Versions: ListingPro versions through 2.9.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to exploit the system, potentially leading ...

8.8CVSS7.7AI score0.00572EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.2 views

PT-2024-28559 · Cridiostudio · Cridiostudio Listingpro

Name of the Vulnerable Software and Affected Versions: CridioStudio ListingPro versions 2.9.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation...

9.8CVSS8AI score0.00411EPSS
Exploits0References10
Patchstack
Patchstack
added 2024/07/22 1:25 p.m.3 views

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ListingPro versions = 2.9.4...

9.8CVSS7AI score0.01661EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.2 views

NavigateCMS SQL注入漏洞

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the id parameter in product.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backend database...

9.8CVSS6.1AI score0.00679EPSS
Exploits1References4
CNVD
CNVD
added 2020/07/30 12:0 a.m.3 views

Electrum Python Console Security Vulnerability

Electrum is a lightweight Bitcoin client software, and Python console is one of the Python console programs.A security vulnerability exists in the Python console in Electrum versions 2.9.4 and earlier, and versions 3.x through 3.0.5. The vulnerability can be exploited by an attacker to steal...

6.8AI score
Exploits0References1
Rows per page
Query Builder