Lucene search
+L

13 matches found

Patchstack
Patchstack
•added 2026/01/29 9:45 p.m.•22 views

WordPress WP MultiTasking plugin <= 0.1.12 - Welcome Popup Update via CSRF vulnerability

Welcome Popup Update via CSRF vulnerability discovered by Norbert Hofmann in WordPress Plugin WP MultiTasking versions = 0.1.12...

6.5CVSS5.9AI score0.00229EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-8784

Malicious code in bioql PyPI...

5.9CVSS8.7AI score0.00214EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/02 1:34 p.m.•13 views

CVE-2025-31605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Welcome Popup welcome-popup allows Stored XSS.This issue affects Welcome Popup: from n/a through = 1.0.10...

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/31 2:07 p.m.•46 views

WordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Welcome Popup versions = 1.0.10...

5.9CVSS6.1AI score0.00214EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/31 1:15 p.m.•16 views

CVE-2025-31605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Welcome Popup welcome-popup allows Stored XSS.This issue affects Welcome Popup: from n/a through = 1.0.10...

5.9CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•27 views

CVE-2025-31605 WordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Welcome Popup welcome-popup allows Stored XSS.This issue affects Welcome Popup: from n/a through = 1.0.10...

5.9CVSS0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 12:55 p.m.•65 views

CVE-2025-31605

Technical details about CVE-2025-31605 are not provided in the supplied documents. The initial description notes a Stored XSS in Welcome Popup

5.9CVSS7.2AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•12 views

WordPress plugin Welcome Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

5.9CVSS7.3AI score0.00214EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2025-31605: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WeblineIndia Welcome Popup welcome-popup allows Stored XSS.This issue affects Welcome Popup: from n/a through = 1.0.10...

5.9CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/08 6:00 a.m.•47 views

CVE-2024-6853 WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack...

0.00229EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/08 6:00 a.m.•23 views

CVE-2024-6853 WP MultiTasking <= 0.1.12 - Welcome Popup Update via CSRF

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such action via a CSRF attack...

6.8AI score0.00229EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/08 12:00 a.m.•19 views

WordPress plugin WP MultiTasking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.8AI score0.00229EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•24 views

PT-2024-37906 · WordPress · Wp Multitasking

Name of the Vulnerable Software and Affected Versions: WP MultiTasking WordPress plugin versions 0.1.12 and earlier Description: The issue is related to a lack of CSRF check when updating welcome popups, which could allow attackers to make logged admins perform such actions via a CSRF attack...

6.5CVSS6.8AI score0.00229EPSS
SaveExploits1References7
Rows per page
Query Builder