Lucene search
+L

100 matches found

NVD
NVD
•added 2023/07/11 9:15 a.m.•38 views

CVE-2023-36517

Cross-Site Request Forgery CSRF vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/11 9:15 a.m.•30 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/11 8:02 a.m.•34 views

CVE-2023-36517 WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/11 8:02 a.m.•82 views

CVE-2023-36517

CVE-2023-36517 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Abstracts/Manuscripts Manager plugin for WordPress (Kevon Adonis WP Abstracts) affecting versions

8.8CVSS6.4AI score0.00256EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/11 12:00 a.m.•6 views

PT-2023-25605

Name of the Vulnerable Software and Affected Versions Kevon Adonis WP Abstracts plugin versions = 2.6.2 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS0.00256EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•21 views

WordPress Plugin WP Abstracts 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.1AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•8 views

CVE-2023-36517: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

8.8CVSS8.2AI score0.00256EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2023/06/27 12:00 a.m.•28 views

WP Abstracts <= 2.6.2 - Cross-Site Request Forgery

The plugin does not sufficiently verify requests use nonces, leading to a CSRF vulnerability...

8.8CVSS6.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/06/27 12:00 a.m.•25 views

WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Abstracts Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28692 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d24a94d01c26 Credits qilin99 Required privilege...

5.9CVSS5.8AI score0.0047EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
•added 2023/06/27 12:00 a.m.•27 views

WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Abstracts Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36517 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a8178ceb0ff9 Credits qilin99 Required...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/06/12 4:15 p.m.•13 views

CVE-2023-29385

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/12 4:15 p.m.•20 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/06/12 3:14 p.m.•57 views

CVE-2023-29385

The CVE-2023-29385 entry describes an unauthenticated, reflected XSS vulnerability in the WP Abstracts plugin for WordPress (Kevon Adonis WP Abstracts) affecting versions up to and including 2.6.2. The root cause is insufficient sanitization/escaping of input, enabling a reflected XSS when user-c...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/06/12 3:14 p.m.•41 views

CVE-2023-29385 WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/12 12:00 a.m.•7 views

CVE-2023-29385: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kevon Adonis WP Abstracts plugin = 2.6.2 versions...

7.1CVSS6.4AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/12 12:00 a.m.•9 views

PT-2023-22238

Name of the Vulnerable Software and Affected Versions Kevon Adonis WP Abstracts plugin versions prior to 2.6.3 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

7.1CVSS0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/06/12 12:00 a.m.•17 views

WordPress Plugin Kevon Adonis WP Abstracts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/05/08 12:00 a.m.•23 views

WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Abstracts Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29385 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID eb9850af3b46 Credits LEE SE HYOUNG...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References2Affected Software1
CISA
CISA
•added 2019/03/07 12:00 a.m.•15 views

ICSJWG Spring Meeting and Call for Abstracts (Deadline Extended)

The Industrial Control Systems Joint Working Group ICSJWG—a collaborative and coordinating body operating under the Critical Infrastructure Partnership Advisory Council CIPAC framework—will hold the 2019 ICSJWG Spring Meeting in Kansas City, MO, April 23–25, 2019. The Spring Meeting kicks off the...

6.7AI score
SaveExploits0References2
CISA
CISA
•added 2018/02/27 12:00 a.m.•30 views

ICSJWG Call for Abstracts

The Industrial Control Systems Joint Working Group ICSJWG—a collaborative and coordinating body operating under the Critical Infrastructure Partnership Advisory Council CIPAC framework—has issued a call for abstracts to be presented at the ICSJWG Spring Meeting in Albuquerque, New Mexico, April...

6.6AI score
SaveExploits0References4
Rows per page
Query Builder