Lucene search
K

4 matches found

EUVD
EUVD
added 2026/03/06 12:30 p.m.3 views

EUVD-2026-10028

QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft special website, which when visited by the victim, will automatically send a POST request with victim's privileges. This software does not implement any protection against this type of attack. Al...

5.1CVSS5.8AI score0.00009EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.6 views

WordPress Automatic Post Categories Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Automatic Post Categories Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de6bb02932f9 Credits Rafie Muhammad Patchstack...

6.4AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.5 views

WordPress Automatic Post Categories plugin <= 1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Automatic Post Categories plugin versions = 1.0. Solution No patched version available...

3.4AI score
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.8 views

WordPress Automatic Post Categories plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Automatic Post Categories plugin versions = 1.0. Solution No patched version available...

4.5AI score
Exploits0References2Affected Software1
Rows per page
Query Builder