Lucene search
+L

543 matches found

CNNVD
CNNVD
added 2023/08/14 12:00 a.m.9 views

WordPress plugin WooCommerce Affiliate Plugin - Coupon Affiliates Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2023/07/26 1:00 a.m.15 views

Ransomware groups claim responsibility for double-attack on Yamaha

Music giant Yamahas Canadian division has experienced a compromise on two different fronts, both related to ransomware. In an attack which has worrying echoes of the recent Estee Lauder attack, multiple attackers have claimed to breach the organisation. Yamaha Canada Music had the following to sa...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.10 views

WordPress Coupon Affiliates Plugin < 5.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Coupon Affiliates Type Plugin Vulnerable versions 5.6.0 Fixed in 5.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer RelyWP PSID de39047c211f Credits Rafie Muhammad Patchstack Required...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/07/10 4:15 p.m.11 views

CVE-2023-28986

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

8.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/10 4:15 p.m.36 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

6.8CVSS8.7AI score0.00312EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/10 3:05 p.m.18 views

CVE-2023-28986 WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

5.4CVSS7.1AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/10 3:05 p.m.47 views

CVE-2023-28986

CVE-2023-28986 is a CSRF vulnerability in the WordPress plugin Affiliates Manager (wpaffiliatemgr), affected versions ≤ 2.9.20. The issue is publicly documented across multiple sources (Red Hat, NVD, Patchstack, CVE listings) as a Cross-Site Request Forgery flaw that can be triggered without auth...

8.8CVSS7.1AI score0.00312EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/10 3:05 p.m.35 views

CVE-2023-28986 WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

5.4CVSS9AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.9 views

Wrodpress Plugin Affiliates Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.11 views

PT-2023-22063 · WordPress · Wpaffiliatemgr Affiliates Manager

Name of the Vulnerable Software and Affected Versions: wpaffiliatemgr Affiliates Manager plugin versions = 2.9.20 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

8.8CVSS8.8AI score0.00312EPSS
SaveExploits0References4
OSV
OSV
added 2023/06/26 6:15 a.m.7 views

CVE-2023-28992

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/26 6:15 a.m.25 views

CVE-2023-28992

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/26 6:15 a.m.23 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/06/26 5:21 a.m.44 views

CVE-2023-28992

CVE-2023-28992 is an unauthenticated reflected XSS in the Coupon Affiliates – WooCommerce Affiliate Plugin (RelyWP) up to version 5.4.3. Root cause: untrusted input echoed back without proper sanitization. Impact described as Cross-Site Scripting with potential script execution in affected pages....

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/26 5:21 a.m.40 views

CVE-2023-28992 WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/26 5:21 a.m.17 views

CVE-2023-28992 WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/26 12:00 a.m.11 views

WordPress Plugin Coupon Affiliates-WooCommerce Affiliate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/26 12:00 a.m.15 views

PT-2023-22069 · WordPress · Relywp Coupon Affiliates – Woocommerce Affiliate Plugin

Name of the Vulnerable Software and Affected Versions: RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin versions = 5.4.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2023/06/15 5:09 a.m.5 views

LockBit Ransomware Extorts $91 Million from U.S. Companies

The threat actors behind the LockBit ransomware-as-a-service RaaS scheme have extorted $91 million following hundreds of attacks against numerous U.S. organizations since 2020. That's according to a joint bulletin published by the U.S. Cybersecurity and Infrastructure Security Agency CISA, the...

6.9AI score
SaveExploits0
CISA
CISA
added 2023/06/14 12:00 p.m.9 views

CISA and Partners Release Joint Advisory on Understanding Ransomware Threat Actors: LockBit

Today, CISA, the Federal Bureau of Investigation FBI, the Multi-State Information Sharing and Analysis Center MS-ISAC, and international partners released Understanding Ransomware Threat Actors: LockBit, a joint Cybersecurity Advisory CSA to help organizations understand and defend against threat...

7.4AI score
SaveExploits0References2
Rows per page
Query Builder