Lucene search
K

8 matches found

EUVD
EUVD
added 2025/11/24 2:13 p.m.2 views

EUVD-2025-198735

Malicious code in @zapier/eslint-plugin-zapier npm...

6.6AI score
Exploits0References1
OSV
OSV
added 2025/11/24 2:13 p.m.1 views

MAL-2025-190763 Malicious code in @zapier/eslint-plugin-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References4
Cvelist
Cvelist
added 2025/06/20 3:4 p.m.10 views

CVE-2025-50010 WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zapier for WordPress: from n/a through = 1.5.2...

5.4CVSS0.0016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/20 3:4 p.m.3 views

CVE-2025-50010 WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Zapier Zapier for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zapier for WordPress: from n/a through 1.5.2...

5.4CVSS5.5AI score0.0016EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin Zapier for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.4AI score0.0016EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/26 6:49 p.m.3 views

WordPress Zapier for WordPress plugin <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function vulnerability

Authenticated Subscriber+ Blind Server-Side Request Forgery via updateduser Function vulnerability discovered by shaman0x01 in WordPress Plugin Zapier for WordPress versions = 1.5.1...

6.4CVSS7.1AI score0.00131EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2025/03/26 11:22 a.m.53 views

CVE-2024-13411

CVE-2024-13411 pertains to the Zapier for WordPress plugin for WordPress, with SSRF vulnerability in all versions up to 1.5.1 via the updated_user() function. The issue allows authenticated attackers with Subscriber-level access or higher to cause the WordPress application to perform web requests...

6.4CVSS6.6AI score0.00131EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.1 views

WordPress plugin Zapier 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

6.4CVSS8.5AI score0.00131EPSS
Exploits0References6
Rows per page
Query Builder