Lucene search
+L

415 matches found

Positive Technologies
Positive Technologies
added 2023/05/30 12:00 a.m.16 views

PT-2023-9952 · Bestwebsoft · Bestwebsoft Twitter Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Twitter Plugin versions up to 2.14 Description: A problematic issue has been found, affecting the twttr settings page function of the twitter.php file in the Settings Page component. This issue leads to cross-site request forgery...

8.8CVSS7.1AI score0.00433EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/30 12:00 a.m.11 views

WordPress Plugin BestWebSoft Twitter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS5.8AI score0.00433EPSS
SaveExploits0References5
NVD
NVD
added 2023/05/29 11:15 p.m.29 views

CVE-2014-125102

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely...

7.5CVSS5.2AI score0.00616EPSS
SaveExploits0References3
Prion
Prion
added 2023/05/29 11:15 p.m.30 views

Information disclosure

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely...

5CVSS6.8AI score0.00616EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/05/29 10:31 p.m.58 views

CVE-2014-125102

CVE-2014-125102 affects the Bestwebsoft Relevant Plugin for WordPress up to version 1.0.7, specifically the Thumbnail Handler component. The vulnerability allows information disclosure and can be exploited remotely. A fix is provided in version 1.0.8, with patch identifier 860d1891025548cf0f5f973...

7.5CVSS5.7AI score0.00616EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/29 10:31 p.m.9 views

CVE-2014-125102 Bestwebsoft Relevant Plugin Thumbnail information disclosure

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely...

4.3CVSS6.8AI score0.00616EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/05/29 10:31 p.m.33 views

CVE-2014-125102 Bestwebsoft Relevant Plugin Thumbnail information disclosure

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely...

4.3CVSS7.4AI score0.00616EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/29 12:00 a.m.11 views

PT-2023-10170 · Bestwebsoft · Bestwebsoft Relevant Plugin

Name of the Vulnerable Software and Affected Versions: Bestwebsoft Relevant Plugin versions up to 1.0.7 Description: A vulnerability was found in the Thumbnail Handler component of the Bestwebsoft Relevant Plugin, leading to information disclosure. The attack can be launched remotely...

7.5CVSS6.8AI score0.00616EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/05/29 12:00 a.m.10 views

WordPress Plugin Bestwebsoft Relevant 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

7.5CVSS5.5AI score0.00616EPSS
SaveExploits0References5
NVD
NVD
added 2023/05/02 2:15 a.m.27 views

CVE-2014-125100

A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 is able to address this issue. The name...

6.1CVSS4.5AI score0.00526EPSS
SaveExploits0References3
Prion
Prion
added 2023/05/02 2:15 a.m.23 views

Cross site scripting

A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 is able to address this issue. The name...

5.8CVSS6.5AI score0.00526EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/02 2:00 a.m.38 views

CVE-2014-125100 BestWebSoft Job Board Plugin cross site scripting

A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 is able to address this issue. The name...

4CVSS6AI score0.00526EPSS
SaveExploits0References3
CVE
CVE
added 2023/05/02 2:00 a.m.58 views

CVE-2014-125100

CVE-2014-125100 affects the BestWebSoft Job Board Plugin for WordPress (version 1.0.0). The issue is a cross-site scripting vulnerability in unknown code that can be triggered remotely. A fix is available in version 1.0.1; the patch is identified as dbb71deee071422ce3e663fbcdce3ad24886f940. The v...

6.1CVSS4.8AI score0.00526EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/05/02 12:00 a.m.11 views

Wordpress Plugin BestWebSoft Job Board 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

6.1CVSS5AI score0.00526EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/05/02 12:00 a.m.11 views

PT-2023-10168 · Bestwebsoft · Bestwebsoft Job Board Plugin

Name of the Vulnerable Software and Affected Versions: BestWebSoft Job Board Plugin version 1.0.0 Description: A vulnerability was found in the BestWebSoft Job Board Plugin on WordPress, affecting unknown code and leading to cross-site scripting. The attack can be initiated remotely...

6.1CVSS7AI score0.00526EPSS
SaveExploits0References8
OSV
OSV
added 2023/04/17 1:15 p.m.14 views

CVE-2023-0765

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

8.8CVSS7.3AI score0.00873EPSS
SaveExploits2References1
OSV
OSV
added 2023/04/17 1:15 p.m.10 views

CVE-2023-0764

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role...

5.4CVSS6.7AI score0.00444EPSS
SaveExploits2References1
NVD
NVD
added 2023/04/17 1:15 p.m.30 views

CVE-2023-0765

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

8.8CVSS9AI score0.00873EPSS
SaveExploits2References1
NVD
NVD
added 2023/04/17 1:15 p.m.25 views

CVE-2023-0764

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role...

5.4CVSS5.4AI score0.00444EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/04/17 12:17 p.m.36 views

CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

9.2AI score0.00873EPSS
SaveExploits2References1
Rows per page
Query Builder