Lucene search
+L

17950 matches found

CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•17 views

WordPress plugin Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid 操作系统命令注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress plugin Total Upkeep - WordPress Backup Plugin plu...

7.2CVSS9.3AI score0.00864EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•7 views

CVE-2025-2257: Improper Neutralization of Special Elements used in an OS Command

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compressionlevel setting. This is due to the plugin using the compressionlevel setting in procopen withou...

7.2CVSS6.1AI score0.00864EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/25 8:22 a.m.•99 views

CVE-2025-2319

CVE-2025-2319 concerns the EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress. According to the CVE entry, versions 4.11.13 through 5.25.08 are vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation in the ELISQLREPORTS_menu function, which could all...

8.8CVSS7.7AI score0.00375EPSS
SaveExploits0References10
Patchstack
Patchstack
•added 2025/03/25 12:37 a.m.•17 views

WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin 4.11.13-5.25.08 - CSRF to RCE vulnerability

CSRF to RCE vulnerability discovered by luckybuddy in WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup versions 4.11.13-5.25.08...

8.8CVSS7.6AI score0.00375EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•5 views

PT-2025-12780

Name of the Vulnerable Software and Affected Versions EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress versions 4.11.13 through 5.25.08 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ELISQLREPORTS menu function...

8.8CVSS0.00375EPSS
SaveExploits0References20
Veeam
Veeam
•added 2025/03/25 12:00 a.m.•58 views

Windows 11 24H2 | Server 2025 - Recovery Media Issue

Issue Resolved in May 13 2025 Windows Update KB5058411 The underlying issue causing recovery media to have the problems documented in this article was resolved in Microsoft Update KB5058411 for Windows 11 and Server 2025. After applying the update, the recovery media must be recreated. Challenge...

6.6AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2025/03/25 12:00 a.m.•40 views

"SharePoint Server backup is not configured for this organization."

Challenge A SharePoint backup job in Veeam Data Cloud for Microsoft 365 fails with the following error: SharePoint Server backup is not configured for this organization. Note: This error occurs despite SharePoint being correctly configured in Microsoft 365. Cause The issue occurs for specific...

6.7AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•25 views

WordPress plugin EZ SQL Reports Shortcode Widget and DB Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.9AI score0.00375EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•8 views

CVE-2025-2319: Cross-Site Request Forgery (CSRF)

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTSmenu' function. This makes it possible for unauthenticated attackers to...

8.8CVSS6AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/24 2:15 p.m.•44 views

CVE-2025-30608

Cross-Site Request Forgery CSRF vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through = 3.5.2...

7.1CVSS0.00167EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:51 p.m.•20 views

WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by johska in WordPress Plugin WordPress SQL Backup versions = 3.5.2...

7.1CVSS7.5AI score0.00167EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/24 1:47 p.m.•16 views

CVE-2025-30608 WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through = 3.5.2...

7.1CVSS7.4AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/24 1:47 p.m.•36 views

CVE-2025-30608 WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through = 3.5.2...

7.1CVSS0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/24 1:47 p.m.•89 views

CVE-2025-30608

CVE-2025-30608 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress SQL Backup that enables Stored XSS. Affected software: WordPress SQL Backup, version range listed as up to 3.5.2 (and from n/a through 3.5.2). The CVSS 3.1 base score is 7.1 (HIGH) with attack vector NETWORK, ...

7.1CVSS7.3AI score0.00167EPSS
SaveExploits0References1
osv_mal
osv_mal
•added 2025/03/24 10:27 a.m.•14 views

MAL-2025-2621 Malicious code in bsb-backup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•5 views

PT-2025-12646

Name of the Vulnerable Software and Affected Versions Anthony WordPress SQL Backup versions 3.5.2 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS0.00167EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•16 views

WordPress plugin WordPress SQL Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

7.1CVSS8.4AI score0.00167EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•5 views

CVE-2025-30608: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through = 3.5.2...

7.1CVSS5.8AI score0.00167EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/24 12:00 a.m.•27 views

Veeam Backup & Replication Code Execution

The vulnerabilities of the Veeam.Backup.Core.BackupSummary component and the Veeam.Backup.EsxManager.xmlFrameworkDs components of the cloud, virtual, and physical system protection solutions from Veeam Backup & Replication are related to deserialization mechanism flaws. Exploiting these...

9.9CVSS8.6AI score0.24EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/22 12:21 a.m.•31 views

CVE-2025-25758

An issue in KukuFM Android v1.12.7 11207 allows attackers to access sensitive cleartext data via the android:allowBackup="true" in the ANdroidManifest.xml...

7.5CVSS6.6AI score0.00303EPSS
SaveExploits1References1
Rows per page
Query Builder