Lucene search
+L

146 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/23 12:00 a.m.•7 views

CVE-2025-68550: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through = 1.1.13...

7.6CVSS5.8AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-13844

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.0016EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-17214

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00158EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-48507

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00387EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-53677

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00407EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-2751

Malicious code in bioql PyPI...

7.6CVSS8.6AI score0.00753EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•19 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes SQL Injection Vulnerability

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

8.5CVSS8.1AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/23 12:00 a.m.•7 views

CVE-2025-5818: Server-Side Request Forgery (SSRF)

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.6 via the fipgetimageoptions function. This makes it possible for authenticated attackers, with administrator-level access and abov...

5.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/18 11:54 a.m.•30 views

CVE-2025-47645

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows SQL Injection.This issue affects ELEX WooCommer...

8.5CVSS5.9AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/16 12:00 a.m.•17 views

WordPress plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes has a SQL injection vulnerability.

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

8.5CVSS8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/16 12:00 a.m.•6 views

CVE-2025-47645: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows SQL Injection.This issue affects ELEX WooCommer...

8.5CVSS5.8AI score0.00386EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•37 views

CVE-2025-30946

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 1:15 p.m.•22 views

CVE-2025-30946

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:54 p.m.•11 views

CVE-2025-30946 WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS5.7AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:54 p.m.•59 views

CVE-2025-30946

CVE-2025-30946 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Custom Bulk/Quick Edit (custom-bulkquick-edit). The issue affects Custom Bulk/Quick Edit versions from n/a through 1.6.10. Public data includes CVSSv3.1 metrics with base score 4.3 (Medium), and the...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•7 views

CVE-2025-4431: Improper Access Control

The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fipsaveattachfeatured function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers...

4.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:25 a.m.•23 views

CVE-2024-0369

The Bulk Edit Post Titles plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulkUpdatePostTitles function in all versions up to, and including, 5.0.0. This makes it possible for authenticated attackers, with subscriber access and abov...

4.3CVSS6.5AI score0.00424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:25 p.m.•16 views

CVE-2025-47473

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

5.4CVSS7.2AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 3:16 p.m.•18 views

CVE-2025-47473

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

5.4CVSS0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:19 p.m.•43 views

CVE-2025-47473 WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Request Forgery.This issue affects PW WooCommerce Bulk Edit: from n/a through = 2.134...

5.4CVSS0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder