Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-52509

Malicious code in bioql PyPI...

7.1CVSS8.9AI score0.0019EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:9 a.m.5 views

CVE-2024-54389

Cross-Site Request Forgery CSRF vulnerability in Eduardo addWeather myweather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through = 2.5.1...

7.1CVSS7.2AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2024/12/16 3:15 p.m.4 views

CVE-2024-54389

Cross-Site Request Forgery CSRF vulnerability in Eduardo addWeather myweather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through = 2.5.1...

7.1CVSS0.0019EPSS
Exploits0References1
CVE
CVE
added 2024/12/16 2:14 p.m.34 views

CVE-2024-54389

CVE-2024-54389 (addWeather) is documented as a Cross-Site Request Forgery to Stored Cross-Site Scripting issue affecting addWeather versions up to 2.5.1. The Red Hat/Wordfence records corroborate the CSRF-to-XSS chain and list the vulnerability as currently unpatched. Affected software: addWeathe...

7.1CVSS7.2AI score0.0019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 2:14 p.m.10 views

CVE-2024-54389 WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eduardo Chiaro addWeather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through 2.5.1...

7.1CVSS7AI score0.0019EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/16 2:14 p.m.18 views

CVE-2024-54389 WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Eduardo addWeather myweather allows Cross Site Request Forgery.This issue affects addWeather: from n/a through = 2.5.1...

7.1CVSS0.0019EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.2 views

PT-2024-36275 · Eduardo Chiaro · Addweather

Name of the Vulnerable Software and Affected Versions: Eduardo Chiaro addWeather versions n/a through 2.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.5.1, consider implementing prop...

7.1CVSS7.1AI score0.0019EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.3 views

WordPress plugin addWeather 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS8.5AI score0.0019EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/12 10:23 a.m.3 views

WordPress addWeather plugin <= 2.5.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin addWeather versions = 2.5.1...

7.1CVSS6.2AI score0.0019EPSS
Exploits0Affected Software1
Rows per page
Query Builder