Lucene search
+L

4 matches found

CNNVD
CNNVD
added 2024/11/23 12:00 a.m.8 views

WordPress plugin Checkout with Cash App on WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.7AI score0.00446EPSS
SaveExploits0References5
WPVulnDB
WPVulnDB
added 2020/11/27 12:00 a.m.20 views

Age Gate < 2.13.5 - Unauthenticated Open Redirect

The plugin takes the wphttpreferer parameter to redirect users after some actions as well as after invalid or missing nonces, leading to an Unauthenticated Open Redirect issue PoC...

3.4AI score
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/09/17 3:15 p.m.17 views

Design/Logic Flaw

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

4.3CVSS5.9AI score0.01365EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2007/07/10 12:00 a.m.35 views

CVE-2007-3639

WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via 1 the wphttpreferer parameter to wp-pass.php, related to the wpgetreferer function in wp-includes/functions.php; and possibly other vectors related to 2...

4CVSS4.7AI score0.02391EPSS
SaveExploits0
Rows per page
Query Builder