Lucene search
+L

92 matches found

Patchstack
Patchstack
added 2025/05/19 4:33 p.m.9 views

WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by RoyTdd in WordPress Plugin AutomatorWP versions = 5.2.1.3...

7.6CVSS7.8AI score0.00288EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/05/19 3:15 p.m.15 views

CVE-2025-48280

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through = 5.2.1.3...

7.6CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 2:45 p.m.37 views

CVE-2025-48280

CVE-2025-48280 (AutomatorWP) — SQL Injection in AutomatorWP prior to 5.2.1.3 due to improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected: AutomatorWP up to 5.2.1.3. Mitigation: upgrade to a version later than 5.2.1.3 (patches/updates referenced in Pa...

7.6CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 2:45 p.m.8 views

CVE-2025-48280 WordPress AutomatorWP <= 5.2.1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP allows Blind SQL Injection. This issue affects AutomatorWP: from n/a through 5.2.1.3...

7.6CVSS7.9AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 2:45 p.m.23 views

CVE-2025-48280 WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through = 5.2.1.3...

7.6CVSS0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.11 views

PT-2025-21985 · Unknown · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP versions through 5.2.1.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can be...

7.6CVSS7.6AI score0.00288EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.7 views

WordPress plugin AutomatorWP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS7.8AI score0.00288EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/19 9:6 p.m.6 views

WordPress AutomatorWP plugin <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value vulnerability

Reflected Cross-Site Scripting via a-0-o-searchfieldvalue vulnerability discovered by Vincent Fourcade vinceMatsui in WordPress Plugin AutomatorWP versions = 5.0.9...

9.6CVSS6.3AI score0.00747EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/12/19 12:15 p.m.20 views

CVE-2024-12626

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-searchfieldvalue’ parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitizatio...

9.6CVSS0.00747EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/19 11:14 a.m.62 views

CVE-2024-12626

The CVE-2024-12626 entry concerns the WordPress plugin AutomatorWP (Automator plugin) versions up to and including 5.0.9. A Reflected Cross-Site Scripting (XSS) flaw exists in the a-0-o-search_field_value parameter due to insufficient input sanitization and output escaping, allowing unauthenticat...

9.6CVSS8.6AI score0.00747EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/19 11:14 a.m.12 views

CVE-2024-12626 AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-searchfieldvalue’ parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitizatio...

9.6CVSS6.7AI score0.00747EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/19 11:14 a.m.40 views

CVE-2024-12626 AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-searchfieldvalue’ parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitizatio...

9.6CVSS0.00747EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.8 views

PT-2024-17678 · WordPress · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP – Automator plugin for WordPress versions up to, and including, 5.0.9 Description: The AutomatorWP plugin is vulnerable to Reflected Cross-Site Scripting via the a-0-o-search field value parameter due to insufficient input...

9.6CVSS8.8AI score0.00747EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/12/19 12:0 a.m.11 views

WordPress plugin AutomatorWP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

9.6CVSS8.3AI score0.00747EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/28 2:15 p.m.6 views

CVE-2023-23992

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

4.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/28 2:15 p.m.23 views

CVE-2023-23992

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

4.3CVSS5.6AI score0.00263EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/28 2:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

4.3CVSS4.8AI score0.00263EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/02/28 1:41 p.m.56 views

CVE-2023-23992

CVE-2023-23992 affects the WordPress AutomatorWP plugin (versions

4.3CVSS5AI score0.00263EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/28 1:41 p.m.8 views

CVE-2023-23992 WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

4.3CVSS5.6AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/02/28 1:41 p.m.28 views

CVE-2023-23992 WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

4.3CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder