Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/25 9:16 a.m.3 views

CVE-2025-14630

The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incorrect nonce validation on the 'saveSettings' and 'renamePost' AJAX actions. This makes it possible for unauthenticated attackers to modify...

4.3CVSS5.5AI score0.0001EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/24 8:26 a.m.26 views

CVE-2025-14630 AdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to Settings Update

The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incorrect nonce validation on the 'saveSettings' and 'renamePost' AJAX actions. This makes it possible for unauthenticated attackers to modify...

4.3CVSS0.0001EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/24 8:26 a.m.4 views

CVE-2025-14630

The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.3. This is due to missing or incorrect nonce validation on the 'saveSettings' and 'renamePost' AJAX actions. This makes it possible for unauthenticated attackers to modify...

4.3CVSS5.8AI score0.0001EPSS
Exploits0References6
CVE
CVE
added 2026/01/24 8:26 a.m.4 views

CVE-2025-14630

CVE-2025-14630 (AdminQuickbar

4.3CVSS5.5AI score0.0001EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/01/24 5:45 a.m.5 views

WordPress AdminQuickbar plugin <= 1.9.3 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Lior Yeshayahu in WordPress Plugin AdminQuickbar versions = 1.9.3...

4.3CVSS5.5AI score0.0001EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.1 views

WordPress plugin AdminQuickbar has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11787

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00199EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 4:1 p.m.2 views

CVE-2025-39464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through = 1.9.1...

7.1CVSS7.2AI score0.00199EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.6 views

CVE-2025-39464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through = 1.9.1...

7.1CVSS0.00199EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:15 p.m.3 views

CVE-2025-39464 WordPress AdminQuickbar plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through = 1.9.1...

7.1CVSS7.2AI score0.00199EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:15 p.m.38 views

CVE-2025-39464

CVE-2025-39464 applies to WordPress AdminQuickbar plugin (versions ≤ 1.9.1) and is a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The impact is ability to execute script in the context of affected users when visiting a crafted URL, with a base CV...

7.1CVSS7.2AI score0.00199EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:15 p.m.10 views

CVE-2025-39464 WordPress AdminQuickbar plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through = 1.9.1...

7.1CVSS0.00199EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.0 views

WordPress plugin AdminQuickbar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS7AI score0.00199EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.2 views

PT-2025-17019 · Unknown · Adminquickbar

Name of the Vulnerable Software and Affected Versions: AdminQuickbar versions 1.9.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

7.1CVSS7.3AI score0.00199EPSS
Exploits0References3
Rows per page
Query Builder