Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:52 a.m.3 views

CVE-2023-46776

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS8.5AI score0.0007EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:10 a.m.3 views

CVE-2018-5311

The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjooecaeoptionscustomcss parameter to the wp-admin/admin.php?page=tonjooexcerpt URI...

5.4CVSS6AI score0.0018EPSS
Exploits1References1
NVD
NVD
added 2024/05/02 5:15 p.m.10 views

CVE-2024-3312

The Easy Custom Auto Excerpt plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12. This makes it possible for unauthenticated attackers to obtain excerpts of password-protected posts...

5.3CVSS5.1AI score0.0081EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.1 views

WordPress plugin Easy Custom Auto Excerpt 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

5.3CVSS6.5AI score0.0081EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/04/19 2:11 a.m.1 views

WordPress Easy Custom Auto Excerpt plugin <= 2.4.12 - Sensitive Information Exposure vulnerability

Sensitive Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin Easy Custom Auto Excerpt versions = 2.4.12...

5.3CVSS7AI score0.0081EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/19 12:0 a.m.11 views

WordPress Easy Custom Auto Excerpt Plugin <= 2.4.12 is vulnerable to Sensitive Data Exposure

Software Easy Custom Auto Excerpt Type Plugin Vulnerable versions = 2.4.12 Fixed in 2.5.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3312 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b2ba9ac0c028 Credits Krzysztof Zając...

5.3CVSS6.5AI score0.0081EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/11/06 12:15 p.m.0 views

CVE-2023-46776

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/11/06 12:15 p.m.13 views

CVE-2023-46776

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS8.8AI score0.0007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/06 12:15 p.m.2 views

CVE-2023-46776

A vulnerability in J0SiE Auto Excerpt everywhere auto-excerpt-everywhere.This issue affects Auto Excerpt everywhere: from n/a through = 1.5...

8.8CVSS8.5AI score0.0007EPSS
Exploits0References3
CVE
CVE
added 2023/11/06 11:1 a.m.91 views

CVE-2023-46776

CVE-2023-46776: CSRF in WordPress plugin Auto Excerpt Everywhere (versions

8.8CVSS8.8AI score0.0007EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/06 11:1 a.m.10 views

CVE-2023-46776 WordPress Auto Excerpt everywhere Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

4.3CVSS7.4AI score0.0007EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.2 views

WordPress Plugin auto-excerpt-everywhere Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.0007EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.2 views

PT-2023-30205 · WordPress · Serena Villa Auto Excerpt Everywhere Plugin

Name of the Vulnerable Software and Affected Versions: Serena Villa Auto Excerpt everywhere plugin versions = 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

8.8CVSS9.3AI score0.0007EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/10/26 12:0 a.m.8 views

WordPress Auto Excerpt everywhere Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Auto Excerpt everywhere Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46776 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 813fdb38dc11 Credits Nguyen Xuan Chi...

8.8CVSS6.6AI score0.0007EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2018/11/14 12:0 a.m.16 views

Easy Custom Auto Excerpt <= 2.4.6 - XSS

The Easy Custom Auto Excerpt WordPress plugin was affected by a XSS security vulnerability...

3.5CVSS2.7AI score0.0018EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2018/01/12 12:0 a.m.17 views

WordPress Easy Custom Auto Excerpt Plugin <= 2.4.6 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112189";...

5.4CVSS5.5AI score0.0018EPSS
Exploits1References1
CNVD
CNVD
added 2018/01/11 12:0 a.m.1 views

WordPress Easy Custom Auto Excerpt Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Easy Custom Auto Excerpt plugin is used in one of the document collection plugin. A cross-site scripting...

5.4CVSS6.2AI score0.0018EPSS
Exploits1References1
NVD
NVD
added 2018/01/09 5:29 a.m.6 views

CVE-2018-5311

The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjooecaeoptionscustomcss parameter to the wp-admin/admin.php?page=tonjooexcerpt URI...

5.4CVSS5.4AI score0.0018EPSS
Exploits1References2
CVE
CVE
added 2018/01/09 5:0 a.m.39 views

CVE-2018-5311

The CVE-2018-5311 entry concerns WordPress plugin Easy Custom Auto Excerpt (v2.4.6) vulnerable to stored/reflected XSS via the tonjoo_ecae_options[custom_css] parameter passed to wp-admin/admin.php?page=tonjoo_excerpt. Affected component: the plugin’s admin settings handling for custom CSS, enabl...

5.4CVSS5.2AI score0.0018EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder