Lucene search
+L

123 matches found

OSV
OSV
•added 2024/06/06 12:26 p.m.•15 views

CGA-VJX9-69QJ-P85C

Bulletin has no description...

6.4CVSS7.2AI score0.00766EPSS
SaveExploits1
OSV
OSV
•added 2024/06/06 12:26 p.m.•17 views

CGA-RX2R-V9JQ-4P74

Bulletin has no description...

5.4CVSS7.5AI score0.00795EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:26 p.m.•25 views

CGA-MVH6-3MGC-HQ8W

Bulletin has no description...

7.5CVSS6.8AI score0.00661EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:26 p.m.•31 views

CGA-MG75-RW8R-52JJ

Bulletin has no description...

7.5CVSS7.2AI score0.00831EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:26 p.m.•10 views

CGA-M3FR-Q79H-CXQV

Bulletin has no description...

9.1CVSS6.5AI score0.0068EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:25 p.m.•23 views

CGA-CG9P-G22H-484F

Bulletin has no description...

4.4CVSS6.7AI score0.02555EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:25 p.m.•15 views

CGA-9VQ4-4632-2R89

Bulletin has no description...

7.5CVSS7.1AI score0.01262EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:23 p.m.•27 views

CGA-4WMP-6W9C-3V8Q

Bulletin has no description...

8.6CVSS6.7AI score0.18923EPSS
SaveExploits18
OSV
OSV
•added 2024/06/06 12:22 p.m.•31 views

CGA-4QH5-C7FR-956H

Bulletin has no description...

6.5CVSS6.8AI score0.01651EPSS
SaveExploits1
OSV
OSV
•added 2024/06/05 5:15 a.m.•19 views

CVE-2024-5149

The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification...

5.3CVSS5.8AI score0.00385EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/29 12:00 a.m.•20 views

PT-2024-34664 · WordPress · Login With Phone Number

Name of the Vulnerable Software and Affected Versions: Login with phone number plugin for WordPress versions up to 1.7.26 Description: The issue is related to authentication bypass due to the activation code default value being empty and a missing not empty check in the lwp ajax register function...

9.8CVSS7.3AI score0.00804EPSS
SaveExploits0References7
WPVulnDB
WPVulnDB
•added 2024/05/03 12:00 a.m.•22 views

Customer Email Verification for WooCommerce < 2.7.5 - Authentication Bypass

Description The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to...

8.1CVSS7.2AI score0.0085EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/04/30 9:15 a.m.•41 views

CVE-2024-4185

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...

8.1CVSS8.3AI score0.0085EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/30 8:32 a.m.•54 views

CVE-2024-4185 Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authentication Bypass in all versions up to, and including, 2.7.4 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the...

8.1CVSS8.4AI score0.0085EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/30 8:32 a.m.•75 views

CVE-2024-4185

The Customer Email Verification for WooCommerce plugin for WordPress (emails-verification-for-woocommerce) contains an Email Verification and Authentication Bypass in all versions up to 2.7.4 due to insufficiently random activation codes. This allows unauthenticated attackers to bypass email veri...

8.1CVSS9.5AI score0.0085EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•19 views

WordPress plugin Customer Email Verification for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.1CVSS7.2AI score0.0085EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/30 12:00 a.m.•19 views

PT-2024-29596 · WordPress · Customer Email Verification For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customer Email Verification for WooCommerce plugin for WordPress versions up to 2.7.4 Description: The issue concerns the Customer Email Verification for WooCommerce plugin for WordPress, which is vulnerable to email verification and...

8.1CVSS7.2AI score0.0085EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2022/09/06 6:15 p.m.•8 views

CVE-2022-2515

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...

6.4CVSS6.3AI score0.00977EPSS
SaveExploits1References5
OSV
OSV
•added 2022/09/06 6:15 p.m.•15 views

CVE-2022-2515

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...

5.4CVSS5.9AI score0.00977EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/09/06 12:00 a.m.•12 views

PT-2022-17101 · WordPress · Simple Banner

Name of the Vulnerable Software and Affected Versions: Simple Banner plugin for WordPress versions up to and including 2.11.0 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers to inject arbitrary web scripts via the pro versio...

6.4CVSS5.3AI score0.00977EPSS
SaveExploits1References6
Rows per page
Query Builder