Lucene search
+L

2890 matches found

Cvelist
Cvelist
added 2025/09/26 8:31 a.m.17 views

CVE-2025-60108 WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a...

8.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.2 views

CVE-2025-60107 WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...

8.5CVSS5.6AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.15 views

CVE-2025-60107 WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...

8.5CVSS0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.13 views

CVE-2025-60107

CVE-2025-60107 affects LambertGroup - AllInOne - Banner with Playlist (WordPress plugin). The vulnerability is an SQL Injection (authenticated) in the Banner with Playlist module, exploitable by an authenticated user with Contributor+ privileges; the issue is currently Unpatched per the LambertGr...

8.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.17 views

CVE-2025-60108

CVE-2025-60108 (LambertGroup - AllInOne - Banner with Thumbnails) is a SQL Injection vulnerability in the WordPress plugin, allowing improper neutralization of input elements. Affected: LambertGroup - AllInOne - Banner with Thumbnails (up through version 3.8). Impact per CVSS: high confidentialit...

8.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.6 views

CVE-2025-58919 WordPress Wide Banner plugin <= 1.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in guihom Wide Banner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wide Banner: from n/a through 1.0.4...

5.3CVSS6.6AI score0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.21 views

CVE-2025-58919

CVE-2025-58919 is a Missing Authorization vulnerability affecting WordPress Wide Banner plugin versions up to 1.0.4. The issue arises from improperly configured access control, resulting in insufficient authorization checks (Broken Access Control). Public sources in the dataset identify Wide Bann...

5.3CVSS5.9AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.19 views

CVE-2025-58919 WordPress Wide Banner plugin <= 1.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in guihom Wide Banner wide-banner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wide Banner: from n/a through = 1.0.4...

5.3CVSS0.00265EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.7 views

PT-2025-39555

Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Thumbnails versions through 3.8 Description A flaw exists in LambertGroup - AllInOne - Banner with Thumbnails that allows for Blind SQL Injection due to improper neutralization of special elements used in ...

8.5CVSS7.2AI score0.00261EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.6 views

PT-2025-39554

Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Playlist versions through 3.8 Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This allows for Blind SQ...

8.5CVSS7.2AI score0.00261EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.36 views

WordPress plugin Wide Banner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.16 views

WordPress plugin AllInOne - Banner Rotator SQL注入漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin AllInOne - Banner Rotator suffers from a SQL injection vulnerability, no detai...

8.5CVSS7.7AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.7 views

PT-2025-39557

Name of the Vulnerable Software and Affected Versions LambertGroup AllInOne - Banner Rotator versions through 3.8 Description The software contains a flaw due to improper neutralization of special elements within SQL commands, leading to a SQL Injection issue. This allows for potential manipulati...

8.5CVSS7.5AI score0.00261EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.5 views

WordPress plugin LambertGroup - AllInOne - Banner with Thumbnails SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A SQL injection...

8.5CVSS7.7AI score0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.8 views

WordPress plugin LambertGroup AllInOne Banner with Playlist SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.6AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.17 views

PT-2025-39533

Name of the Vulnerable Software and Affected Versions guihom Wide Banner versions through 1.0.4 Description A missing authorization issue exists in guihom Wide Banner, allowing exploitation of incorrectly configured access control security levels. Recommendations At the moment, there is no...

5.3CVSS6.4AI score0.00265EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/09/24 12:00 a.m.12 views

WordPress <= 6.8.2 Multiple Vulnerabilities (Sep 2025) - Windows

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

5.9CVSS7.6AI score0.00266EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/09/16 3:01 p.m.23 views

WordPress Wide Banner plugin <= 1.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Wide Banner versions = 1.0.4...

5.3CVSS6.8AI score0.00265EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2025/09/15 3:56 p.m.217 views

nettoolbox

NetToolbox - Network Security Toolkit A comprehensive, modern...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-32739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...

5.3CVSS6.2AI score0.00793EPSS
SaveExploits0References2
Rows per page
Query Builder