Lucene search
+L

47 matches found

CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•17 views

WordPress plugin Binary MLM Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.8AI score0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2024-12383: Cross-Site Request Forgery (CSRF)

The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmwdisplaypvsetpage' function and insufficient input sanitization and output escaping of the...

6.1CVSS5.7AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2024-12384: Improper Neutralization of Input During Web Page Generation

The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page’ parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS6AI score0.00348EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/06 6:50 p.m.•15 views

WordPress Binary MLM Woocommerce plugin <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Binary MLM Woocommerce versions = 2.0...

6.1CVSS5.9AI score0.00202EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2024/09/26 12:00 a.m.•306 views

Responsive Binary mlm 3.2.0 SQL Injection

==================================================================================================================================== | Title : Responsive Binary mlm 3.2.0 Auth By PAss Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/24 12:00 a.m.•6 views

CVE-2018-17843: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0...

9.8CVSS5.8AI score0.02009EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/24 12:00 a.m.•5 views

PT-2019-9527

Name of the Vulnerable Software and Affected Versions ADD Clicking MLM Software version 1.0 Binary MLM Software version 1.0 Level MLM Software version 1.0 Singleleg MLM Software version 1.0 Autopool MLM Software version 1.0 Investment MLM Software version 1.0 Bidding MLM Software version 1.0...

9.8CVSS0.02009EPSS
SaveExploits0References4
Rows per page
Query Builder