Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-37056

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00162EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:24 a.m.4 views

CVE-2024-3987

The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

5.4CVSS6AI score0.00338EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:44 a.m.3 views

CVE-2024-37274

Cross-Site Request Forgery CSRF vulnerability in Rui Guerreiro WP Mobile Menu mobile-menu allows Cross Site Request Forgery.This issue affects WP Mobile Menu: from n/a through = 2.8.4.3...

4.3CVSS5.9AI score0.00162EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:22 a.m.4 views

CVE-2024-2508

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

5.3CVSS6.7AI score0.00223EPSS
Exploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.3 views

CVE-2024-37274

Cross-Site Request Forgery CSRF vulnerability in Rui Guerreiro WP Mobile Menu mobile-menu allows Cross Site Request Forgery.This issue affects WP Mobile Menu: from n/a through = 2.8.4.3...

4.3CVSS0.00162EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:0 p.m.35 views

CVE-2024-37274

CVE-2024-37274 concerns the WordPress plugin WP Mobile Menu (Freshlight Lab) with CSRF vulnerability. Public details indicate the issue affects WP Mobile Menu versions up to 2.8.4.3, allowing cross-site request forgery. The description from the CVE and corroborating records states a CSRF vulnerab...

4.3CVSS5.9AI score0.00162EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.2 views

WordPress plugin WP Mobile Menu 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site request forge...

4.3CVSS6.5AI score0.00162EPSS
Exploits0References1
NVD
NVD
added 2024/07/31 9:15 a.m.12 views

CVE-2024-2508

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

5.3CVSS0.00223EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/31 8:30 a.m.12 views

CVE-2024-2508 WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification

The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savemenuitemicon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attackers to add the 'mobmenuicon' post meta to...

5.3CVSS0.00223EPSS
Exploits0References2
CVE
CVE
added 2024/07/31 8:30 a.m.38 views

CVE-2024-2508

CVE-2024-2508 affects the WordPress plugin WP Mobile Menu (versions up to 2.8.4.4). The vulnerability arises from a missing capability check in the save_menu_item_icon function, enabling unauthenticated attackers to modify data by adding the post meta key '_mobmenu_icon' with a crafted value on a...

5.3CVSS5AI score0.00223EPSS
Exploits0References2
NVD
NVD
added 2024/06/07 3:15 a.m.10 views

CVE-2024-3987

The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

5.4CVSS0.00338EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/07 2:39 a.m.12 views

CVE-2024-3987 WP Mobile Menu – The Mobile-Friendly Responsive Menu <= 2.8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt

The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

5.4CVSS5.8AI score0.00338EPSS
Exploits0References2
CVE
CVE
added 2024/06/07 2:39 a.m.55 views

CVE-2024-3987

CVE-2024-3987 : The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored XSS via image alt text in all versions up to 2.8.4.2, caused by insufficient input sanitization and output escaping. The vulnerability could be triggered by an authenticated attac...

5.4CVSS5.3AI score0.00338EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2021/08/09 12:0 a.m.9 views

WordPress WP Mobile Menu plugin <= 2.8.2.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress WP Mobile Menu plugin versions = 2.8.2.2. Solution Update the WordPress WP Mobile Menu plugin to the latest available version at least 2.8.2.3...

2AI score
Exploits0References2Affected Software1
Rows per page
Query Builder