Lucene search
+L

232 matches found

Vulnrichment
Vulnrichment
added 2025/12/05 9:27 a.m.8 views

CVE-2025-12851 My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller

The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.32 via the 'controller' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any...

8.1CVSS7AI score0.00756EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/12/05 7:16 a.m.16 views

WordPress My auctions allegro plugin <= 3.6.32 - Unauthenticated Local File Inclusion via controller vulnerability

Unauthenticated Local File Inclusion via controller vulnerability discovered by type5afe in WordPress Plugin My auctions allegro versions = 3.6.32...

8.1CVSS6.8AI score0.00756EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/05 7:11 a.m.9 views

WordPress My auctions allegro plugin <= 3.6.32 - Unauthenticated SQL Injection via auction_id vulnerability

Unauthenticated SQL Injection via auctionid vulnerability discovered by type5afe in WordPress Plugin My auctions allegro versions = 3.6.32...

7.5CVSS7.8AI score0.00324EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/05 6:43 a.m.12 views

EUVD-2025-201391

The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auctionid’ parameter in all versions up to, and including, 3.6.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS6.3AI score0.00324EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/05 12:00 a.m.15 views

WordPress plugin My auctions allegro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

8.1CVSS6AI score0.00756EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/05 12:00 a.m.10 views

WordPress plugin My auctions allegro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

7.5CVSS7.6AI score0.00324EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/05 12:00 a.m.20 views

PT-2025-49233

Name of the Vulnerable Software and Affected Versions My auctions allegro plugin for WordPress versions through 3.6.32 Description The My auctions allegro plugin for WordPress is susceptible to a Local File Inclusion issue via the controller parameter. This allows unauthenticated attackers to...

8.1CVSS7.4AI score0.00756EPSS
SaveExploits0References8
Rapid7 Blog
Rapid7 Blog
added 2025/11/24 2:21 p.m.12 views

From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars

Ransomware has evolved from simple digital extortion into a structured, profit-driven criminal enterprise. Over time, it has led to the development of a complex ecosystem where stolen data is not only leveraged for ransom, but also sold to the highest bidder. This trend first gained traction in...

6.7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/11 9:30 a.m.9 views

EUVD-2025-33816

The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 3.6.31 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS6.1AI score0.00276EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/11 7:25 a.m.39 views

CVE-2025-10048

The CVE-2025-10048 entry concerns the WordPress plugin My auctions allegro (versions up to and including 3.6.31). It is vulnerable to SQL Injection via the order parameter due to insufficient escaping and inadequate query preparation, enabling an authenticated attacker with Administrator+ privile...

4.9CVSS6.2AI score0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/11 12:00 a.m.21 views

PT-2025-41641

Name of the Vulnerable Software and Affected Versions My auctions allegro plugin for WordPress versions through 3.6.31 Description The software contains a SQL Injection issue due to insufficient escaping of the order parameter and inadequate preparation of the SQL query. This allows authenticated...

4.9CVSS7.1AI score0.00276EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/11 12:00 a.m.10 views

WordPress plugin My auctions allegro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

4.9CVSS7.6AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/10/10 11:18 p.m.12 views

WordPress My Auctions Allegro plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by tmrswrr in WordPress Plugin My auctions allegro versions = 3.6.31...

4.9CVSS7.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2005-1367

Malware in sbrugna...

7.5CVSS6.4AI score0.01514EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2007-5969

Malware in sbrugna...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2008-4735

Malware in sbrugna...

7.5CVSS6.4AI score0.01196EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-10878

Malicious code in bioql PyPI...

7.1CVSS7.6AI score0.00131EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-7375

Malicious code in bioql PyPI...

6.3CVSS9.2AI score0.00358EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-2951

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-8810

Malicious code in bioql PyPI...

8.5CVSS8.7AI score0.00325EPSS
SaveExploits0References2
Rows per page
Query Builder