Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-4441

Malware in sbrugna...

4.3CVSS6.4AI score0.00174EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/09/06 12:0 a.m.1 views

WordPress 插件 SQL注入漏洞

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A SQL injection vulnerability exists in Wordpress Plugin Alipay, which stems from the product...

7.2CVSS6.1AI score0.00567EPSS
Exploits2References3
Patchstack
Patchstack
added 2021/07/23 12:0 a.m.18 views

WordPress Alipay plugin <= 3.7.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Syed Sheeraz Ali Codevigilant in WordPress Alipay plugin versions = 3.7.2. Solution Deactivate and delete. This plugin has been closed as of May 13, 2021 and is not available for download. Reason: Security Issue...

7.2CVSS3.3AI score0.00567EPSS
Exploits2References3Affected Software1
NVD
NVD
added 2014/10/21 3:55 p.m.9 views

CVE-2014-4514

Cross-site scripting XSS vulnerability in includes/apitenpay/inc.tenpaynotify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function...

4.3CVSS5.7AI score0.00174EPSS
Exploits1References2
Cvelist
Cvelist
added 2014/10/21 3:0 p.m.13 views

CVE-2014-4514

Cross-site scripting XSS vulnerability in includes/apitenpay/inc.tenpaynotify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function...

5.7AI score0.00174EPSS
Exploits1References2
CVE
CVE
added 2014/10/21 3:0 p.m.39 views

CVE-2014-4514

CVE-2014-4514 describes a cross-site scripting (XSS) vulnerability in the WordPress Alipay plugin (versions 3.6.0 and earlier) affecting includes/api_tenpay/inc.tenpay_notify.php. The issue allows remote attackers to inject arbitrary script/HTML via vectors related to the getDebugInfo function. A...

4.3CVSS5.9AI score0.00174EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder