Lucene search
K

16 matches found

Vulnrichment
Vulnrichment
added 2026/02/04 8:25 a.m.1 views

CVE-2026-0816 All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/04 8:25 a.m.2 views

CVE-2026-0816

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS5.8AI score0.00013EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/04 8:25 a.m.24 views

CVE-2026-0816 All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'deleteid' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

4.9CVSS0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-11675

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.0016EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-10596

Malicious code in bioql PyPI...

8.2CVSS8.7AI score0.0019EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-5662

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00232EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/25 5:52 p.m.4 views

CVE-2025-32546

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

7.1CVSS7.2AI score0.0016EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.2 views

CVE-2025-32546

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

7.1CVSS0.0016EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.2 views

WordPress plugin All push notification for WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.1AI score0.0016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 5:29 p.m.4 views

CVE-2025-32547

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS7.3AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2025/04/09 5:15 p.m.4 views

CVE-2025-32547

Cross-Site Request Forgery CSRF vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through = 1.5.3...

8.2CVSS0.0019EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.1 views

WordPress plugin All push notification for WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.2CVSS8.6AI score0.0019EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/05 3:34 p.m.5 views

CVE-2025-25092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
NVD
NVD
added 2025/03/03 2:15 p.m.4 views

CVE-2025-25092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

7.1CVSS0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.41 views

CVE-2025-25092

CVE-2025-25092 is a reflected XSS in the WordPress plugin “All push notification for WP” (affecting versions up to 1.5.3). The issue arises from improper input neutralization during web-page generation, enabling reflected malicious input to be executed in a victim’s browser. Reported CVSSv3.1 bas...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.12 views

CVE-2025-25092 WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP: from n/a through = 1.5.3...

7.1CVSS0.00232EPSS
Exploits0References1
Rows per page
Query Builder