Lucene search
K

26 matches found

Patchstack
Patchstack
added 2026/03/09 6:39 a.m.2 views

WordPress ZIP Code Based Content Protection plugin <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter vulnerability

Unauthenticated SQL Injection via 'zipcode' Parameter vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin ZIP Code Based Content Protection versions = 1.0.2...

7.5CVSS5.8AI score0.00106EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/08 1:44 a.m.0 views

CVE-2025-14353

The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

7.5CVSS5.8AI score0.00106EPSS
Exploits0References1
CVE
CVE
added 2026/03/07 1:21 a.m.9 views

CVE-2025-14353

The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to 1.0.2 via the 'zipcode' parameter. The issue arises from insufficient escaping of the user-supplied parameter and a lack of proper preparation in the existing SQL query, enabling unauth...

7.5CVSS5.8AI score0.00106EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/07 1:21 a.m.25 views

CVE-2025-14353 ZIP Code Based Content Protection <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter

The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

7.5CVSS0.00106EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/07 12:0 a.m.2 views

WordPress plugin ZIP Code Based Content Protection SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS6AI score0.00106EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.3 views

Zenphoto 跨站脚本漏洞

Zenphoto is a content management system from Zenphoto open source. A cross-site scripting vulnerability exists in Zenphoto version 1.6, which stems from improperly cleared user zip code fields and could lead to a stored cross-site scripting attack...

5.1CVSS6.1AI score0.00024EPSS
Exploits1References4
Schneier on Security
Schneier on Security
added 2025/12/05 8:8 a.m.3 views

New Anonymous Phone Service

A new anonymous phone service allows you to sign up with just a zip code...

6.9AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2025/12/04 5:0 p.m.8 views

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code

Privacy stalwart Nicholas Merrill spent a decade fighting an FBI surveillance order. Now he wants to sell you phone service—without knowing almost anything about you...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-6834

Malware in sbrugna...

9.8CVSS9.5AI score0.00238EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27433

Malicious code in bioql PyPI...

7.6CVSS6.5AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2025/09/09 5:16 p.m.2 views

CVE-2025-59008

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through = 1.0.0...

7.6CVSS0.00049EPSS
Exploits0References1
CVE
CVE
added 2025/09/09 4:25 p.m.7 views

CVE-2025-59008

CVE-2025-59008 relates to the WordPress plugin “ZIP Code Based Content Protection.” It describes an SQL injection caused by improper neutralization of input in versions up to 1.0.0. The vulnerability is network‑level with high privileges required and no user interaction, and it has a high impact ...

7.6CVSS6AI score0.00049EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/09 4:25 p.m.7 views

CVE-2025-59008 WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through = 1.0.0...

7.6CVSS0.00049EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/09 4:25 p.m.1 views

CVE-2025-59008 WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through = 1.0.0...

7.6CVSS5.6AI score0.00049EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.2 views

WordPress plugin ZIP Code Based Content Protection SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...

7.6CVSS7.6AI score0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.1 views

PT-2025-36815

Name of the Vulnerable Software and Affected Versions: PressTigers ZIP Code Based Content Protection versions through 1.0.0 Description: The software contains a SQL injection issue due to improper neutralization of special elements used in an SQL command. This allows for SQL injection...

7.6CVSS7.5AI score0.00049EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/09/08 3:32 a.m.2 views

WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by RoyTdd in WordPress Plugin ZIP Code Based Content Protection versions = 1.0.0...

7.6CVSS7.9AI score0.00049EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/08/19 2:15 a.m.1 views

CVE-2020-23466

Cross Site Scripting XSS vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field...

5.4CVSS6AI score0.00197EPSS
Exploits1References2
myhack58
myhack58
added 2019/05/25 12:0 a.m.1491 views

Get the Facebook Marketplace sellers precise location information-vulnerability warning-the black bar safety net

! This article share it with Facebook Marketplace sales system associated with the user information leakage vulnerability through which the vulnerability can obtain the release of goods the seller's accurate to the latitude and longitude and zip code and other specific location information...

0.4AI score
Exploits0
Prion
Prion
added 2017/10/23 8:29 a.m.7 views

Sql injection

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php aka the zip code search script...

7.5CVSS9.8AI score0.00238EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder