Lucene search
+L

199 matches found

Cvelist
Cvelist
•added 2025/11/06 7:27 a.m.•46 views

CVE-2025-12360 Better Find and Replace <= 1.7.7 - Missing Authorization

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafarajax function in all versions up to, and including, 1.7.7. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00234EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/06 7:27 a.m.•35 views

CVE-2025-12360

CVE-2025-12360 affects the WordPress plugin Better Find and Replace – AI-Powered Suggestions . The vulnerability is a missing capability check in the rtafar_ajax() handler, present in all versions up to and including 1.7.7. As a result, authenticated attackers with Subscriber-level access can tri...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/06 7:27 a.m.•12 views

CVE-2025-12360 Better Find and Replace <= 1.7.7 - Missing Authorization

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafarajax function in all versions up to, and including, 1.7.7. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/06 7:27 a.m.•20 views

EUVD-2025-37979

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafarajax function in all versions up to, and including, 1.7.7. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS4.7AI score0.00234EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/11/06 1:07 a.m.•21 views

WordPress Better Find and Replace plugin <= 1.7.7 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Adrian Lukita in WordPress Plugin Better Find and Replace versions = 1.7.7...

4.3CVSS6.7AI score0.00234EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•11 views

CVE-2025-12360: Improper Authorization

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafarajax function in all versions up to, and including, 1.7.7. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•18 views

WordPress plugin “Better Find and Replace – AI-Powered Suggestions” has a licensing issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... An authorization iss...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•23 views

PT-2025-45180

Name of the Vulnerable Software and Affected Versions Better Find and Replace – AI-Powered Suggestions plugin for WordPress versions through 1.7.7 Description The software is susceptible to unauthorized API usage because of a missing capability check within the rtafar ajax function. This allows...

4.3CVSS6.3AI score0.00234EPSS
SaveExploits0References6
CNVD
CNVD
•added 2025/10/21 12:00 a.m.•23 views

WordPress Find And Replace content plugin cross-site scripting vulnerability

WordPress Find And Replace content plugin is a plugin used to batch find and replace the specified text in the website content, mainly used to solve the problem of batch modification in the website content update demand. A cross-site scripting vulnerability exists in the WordPress Find And Replac...

7.2CVSS6.2AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/15 8:26 a.m.•8 views

CVE-2025-10313 Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...

7.2CVSS5.9AI score0.00285EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/10/15 1:08 a.m.•26 views

WordPress Find And Replace content for WordPress plugin <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting vulnerability discovered by ifoundbug in WordPress Plugin Find And Replace content for WordPress versions = 1.1...

7.2CVSS5.8AI score0.00285EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•8 views

CVE-2025-10313: Missing Authorization

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...

7.2CVSS5.9AI score0.00285EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•9 views

PT-2025-42298

Name of the Vulnerable Software and Affected Versions Find And Replace content for WordPress plugin versions prior to 1.2 Description The Find And Replace content for WordPress plugin for WordPress is susceptible to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement. This ...

7.2CVSS6AI score0.00285EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-11588

Malware in sbrugna...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-5883

Malware in sbrugna...

8.8CVSS8AI score0.00809EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-24911

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-38141

Malicious code in bioql PyPI...

8.3CVSS6.5AI score0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-24774

Malicious code in bioql PyPI...

7.2CVSS7.2AI score0.01255EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-3926

Malicious code in bioql PyPI...

8.8CVSS9.4AI score0.00534EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:25 p.m.•9 views

CVE-2025-53466 WordPress Better Find and Replace Plugin <= 1.7.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeSolz Better Find and Replace allows Stored XSS. This issue affects Better Find and Replace: from n/a through 1.7.6...

5.9CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Rows per page
Query Builder