Lucene search
+L

235 matches found

NVD
NVD
added yesterday5 views

CVE-2026-65543

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

7.5CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday9 views

CVE-2026-65543 WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

7.5CVSS
SaveExploits0References1
CVE
CVE
added yesterday17 views

CVE-2026-65543

CVE-2026-65543 affects the WordPress Vimeo plugin (versions ≤ 1.2.2). The vulnerability is described as Subscriber Sensitive Data Exposure, with CVSS v3.1 Base Score 7.5 (HIGH) and an attack vector of NETWORK, requiring no privileges and no user interaction. The root cause and affected components...

7.5CVSS5.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-65543

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

7.5CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added yesterday6 views

EUVD-2026-53973

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

7.5CVSS5.4AI score
SaveExploits0References1
Patchstack
Patchstack
added 2026/07/28 11:31 a.m.8 views

WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by 0xzenko in WordPress Plugin Vimeo versions = 1.2.2...

5.8AI score
SaveExploits0Affected Software1
HackRead
HackRead
added 2026/05/06 5:28 p.m.61 views

ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users

ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2025/12/24 3:30 p.m.4 views

EUVD-2025-205251

Cross-Site Request Forgery CSRF vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vimeo-video-post-lite allows Cross Site Request Forgery.This issue affects Vimeotheque: from n/a through = 2.3.5.2...

8.8CVSS6.3AI score0.00111EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.6 views

CVE-2025-68584

Cross-Site Request Forgery CSRF vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vimeo-video-post-lite allows Cross Site Request Forgery.This issue affects Vimeotheque: from n/a through = 2.3.5.2...

4.3CVSS0.00111EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 3:59 a.m.7 views

CVE-2025-14170

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogalleryadmin function hooked to adminmenu. This makes it possible for authenticated attackers, with Subscriber-lev...

5.3CVSS5.9AI score0.00201EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 6:31 a.m.10 views

EUVD-2025-203015

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogalleryadmin function hooked to adminmenu. This makes it possible for authenticated attackers, with Subscriber-lev...

5.3CVSS5.4AI score0.00201EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/12 4:15 a.m.13 views

CVE-2025-14170

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogalleryadmin function hooked to adminmenu. This makes it possible for authenticated attackers, with Subscriber-lev...

4.3CVSS0.00201EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/12 3:20 a.m.4 views

CVE-2025-14170 Vimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogalleryadmin function hooked to adminmenu. This makes it possible for authenticated attackers, with Subscriber-lev...

4.3CVSS5.5AI score0.00201EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/12 3:20 a.m.27 views

CVE-2025-14170

CVE-2025-14170 (Vimeo SimpleGallery) : The WordPress plugin Vimeo SimpleGallery is vulnerable to Missing Authorization in all versions up to 0.2 due to missing authorization checks in vimeogallery_admin hooked to admin_menu. This allows authenticated attackers with Subscriber-level access and abo...

4.3CVSS5.5AI score0.00201EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 3:20 a.m.40 views

CVE-2025-14170 Vimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogalleryadmin function hooked to adminmenu. This makes it possible for authenticated attackers, with Subscriber-lev...

4.3CVSS0.00201EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.12 views

WordPress plugin Vimeo SimpleGallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.13 views

PT-2025-50864

The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the vimeogallery admin function hooked to admin menu. This makes it possible for authenticated attackers, with...

5.3CVSS5.9AI score0.00201EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/12/11 8:54 p.m.9 views

WordPress Vimeo SimpleGallery plugin <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Settings Modification vulnerability discovered by Legion Hunter in WordPress Plugin Vimeo SimpleGallery versions = 0.2...

5.3CVSS6.7AI score0.00201EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
added 2025/12/04 12:53 a.m.8 views

[SECURITY] Fedora 43 Update: persepolis-5.1.1-6.fc43

Persepolis is a Download Manager written in Python. - Multi segment downloading - Scheduling downloads - Download queuing - Finding and downloading video from Youtube, Vimeo, DailyMotion,...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2016-1706

Malware in sbrugna...

6.1CVSS6.3AI score0.00961EPSS
SaveExploits0References3
Rows per page
Query Builder