Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 7:22 a.m.9 views

CVE-2025-14864

The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the vdgetapikey function which is hooked to wpajaxvirusdieapikey. This makes it possible for...

4.3CVSS5.3AI score0.00327EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 7:17 a.m.4 views

CVE-2025-14864

The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the vdgetapikey function which is hooked to wpajaxvirusdieapikey. This makes it possible for...

4.3CVSS0.00327EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/19 4:36 a.m.5 views

CVE-2025-14864 Virusdie <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) API Key Disclosure

The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the vdgetapikey function which is hooked to wpajaxvirusdieapikey. This makes it possible for...

4.3CVSS5.3AI score0.00327EPSS
Exploits0References4
CVE
CVE
added 2026/02/19 4:36 a.m.12 views

CVE-2025-14864

CVE-2025-14864 concerns Virusdie – One-click website security (WordPress) up to version 1.1.7. The vulnerability arises from missing capability checks on the vd_get_apikey function, which is hooked to wp_ajax_virusdie_apikey. This allows authenticated attackers with Subscriber-level access and ab...

4.3CVSS5.3AI score0.00327EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/02/19 12:9 a.m.6 views

WordPress Virusdie plugin <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) API Key Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ API Key Disclosure vulnerability discovered by Sushi Com Abacate in WordPress Plugin Virusdie versions = 1.1.7...

4.3CVSS5.5AI score0.00327EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.6 views

PT-2026-20621

The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the vd get apikey function which is hooked to wp ajax virusdie apikey. This makes it possible for...

4.3CVSS5.3AI score0.00327EPSS
Exploits0References4
CVE
CVE
added 2025/12/24 1:10 p.m.10 views

CVE-2025-68577

Technical details for CVE-2025-68577 are not provided in the supplied documents. The initial description notes a missing authorization issue in Virusdie Plugin (

4.3CVSS6.6AI score0.00189EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.8 views

CVE-2025-68576

Technical details about CVE-2025-68576 (Virusdie WordPress plugin exposure) are not publicly available in the provided documents. No affected product/version or remediation information is disclosed here; monitor for updates from vendors and security advisories.

4.3CVSS6.5AI score0.00215EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.25 views

CVE-2025-68577 WordPress Virusdie plugin <= 1.1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virusdie: from n/a through = 1.1.6...

4.3CVSS0.00189EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.34 views

CVE-2025-68576 WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through = 1.1.6...

4.3CVSS0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

WordPress plugin Virusdie 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.6AI score0.00189EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/21 7:56 p.m.5 views

WordPress Virusdie plugin <= 1.1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Virusdie versions = 1.1.6...

8.8CVSS7AI score0.00189EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/21 7:50 p.m.6 views

WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Nabil Irawan in WordPress Plugin Virusdie versions = 1.1.6...

7.5CVSS7AI score0.00215EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/06/27 2:47 p.m.6 views

WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Virusdie versions = 1.1.3...

5.4CVSS6.6AI score0.00128EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/06/27 1:21 p.m.11 views

CVE-2025-53265 WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Virusdie Virusdie virusdie allows Cross Site Request Forgery.This issue affects Virusdie: from n/a through = 1.1.3...

5.4CVSS0.00128EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 1:21 p.m.4 views

CVE-2025-53265 WordPress Virusdie plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Elena Yamshikova Virusdie allows Cross Site Request Forgery. This issue affects Virusdie: from n/a through 1.1.3...

5.4CVSS7.2AI score0.00128EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin Virusdie 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.5AI score0.00128EPSS
Exploits0References2
Rows per page
Query Builder