Lucene search
+L

7425 matches found

NVD
NVD
added 2023/07/10 4:15 p.m.57 views

CVE-2023-28989

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/10 4:15 p.m.8 views

CVE-2023-28989

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

8.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

6.8CVSS8.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 12:51 p.m.57 views

CVE-2023-28989 WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

4.3CVSS9.1AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 12:51 p.m.48 views

CVE-2023-28989

CVE-2023-28989 is a CSRF vulnerability in the WordPress plugin Happy Addons for Elementor (weDevs) affecting versions

8.8CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/10 12:51 p.m.18 views

CVE-2023-28989 WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in weDevs Happy Addons for Elementor plugin = 3.8.2 versions...

4.3CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.18 views

Wrodpress Plugin Happy Addons for Elementor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.00321EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/07/10 12:00 a.m.24 views

WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Broken Access Control

Software Premium Addons PRO Type Plugin Vulnerable versions = 2.9.0 Fixed in 2.9.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-37869 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 09e72b9c3acf Credits Rafie Muhammad Patchstack...

8.8CVSS6.6AI score0.00633EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/07/10 12:00 a.m.16 views

WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure

Software Premium Addons PRO Type Plugin Vulnerable versions = 2.9.0 Fixed in 2.9.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-37868 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 61bc62d7d465 Credits Rafie Muhammad...

6.5CVSS6.6AI score0.00717EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/23 12:15 p.m.14 views

CVE-2023-34012

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premium Addons for Elementor Premium Addons PRO plugin = 2.8.24 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/23 12:15 p.m.35 views

CVE-2023-34012

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premium Addons for Elementor Premium Addons PRO plugin = 2.8.24 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/23 11:24 a.m.48 views

CVE-2023-34012 WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premium Addons for Elementor Premium Addons PRO plugin = 2.8.24 versions...

7.1CVSS6.4AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/23 11:24 a.m.79 views

CVE-2023-34012

CVE-2023-34012 affects Premium Addons for Elementor Premium Addons PRO (WordPress) up to version 2.8.24, with an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability. The issue is fixed in version 2.8.25; update to that version or apply vendor guidance. The vulnerability is not desc...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/23 11:24 a.m.16 views

CVE-2023-34012 WordPress Premium Addons PRO Plugin <= 2.8.24 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Premium Addons for Elementor Premium Addons PRO plugin = 2.8.24 versions...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/23 12:00 a.m.8 views

WordPress Plugin Premium Addons PRO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/23 12:00 a.m.16 views

PT-2023-24631 · Unknown · Premium Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Premium Addons for Elementor Premium Addons PRO plugin versions = 2.8.24 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scrip...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/06/20 12:00 a.m.19 views

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

Software Unlimited Elements For Elementor Free Widgets, Addons, Templates Type Plugin Vulnerable versions = 1.5.65 Fixed in 1.5.66 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-31231 Patch priority High CVSS severity High 9.9 Developer Unlimited Elements PSID...

9.9CVSS6.7AI score0.00652EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/06/20 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2023-0201)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.12966EPSS
SaveExploits10References10
OSV
OSV
added 2023/06/19 12:15 p.m.7 views

CVE-2022-47586

Unauth. SQL Injection SQLi vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin = 3.1.23 versions...

9.8CVSS5.8AI score0.00652EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/19 12:15 p.m.23 views

CVE-2022-47586

Unauth. SQL Injection SQLi vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin = 3.1.23 versions...

9.8CVSS9.3AI score0.00652EPSS
SaveExploits0References1
Rows per page
Query Builder