Lucene search
+L

3336 matches found

RedhatCVE
RedhatCVE
•added 2026/01/25 9:16 a.m.•33 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/24 8:16 a.m.•23 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS0.00179EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/24 7:26 a.m.•55 views

CVE-2026-1081 Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS0.00179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/24 7:26 a.m.•11 views

CVE-2026-1081 Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.6AI score0.00179EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/24 7:26 a.m.•11 views

CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.8AI score0.00179EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/24 7:26 a.m.•34 views

CVE-2026-1081

CVE-2026-1081 concerns the WordPress plugin Set Bulk Post Categories, affected

4.3CVSS5.6AI score0.00179EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/01/24 4:32 a.m.•22 views

WordPress Set Bulk Post Categories plugin <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update vulnerability

Cross-Site Request Forgery to Bulk Post Category Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Set Bulk Post Categories versions = 1.1...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•6 views

CVE-2026-1081: Cross-Site Request Forgery (CSRF)

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•49 views

PT-2026-4581

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categorie...

4.3CVSS5.5AI score0.00179EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•14 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.4AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS0.00153EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:56 p.m.•27 views

CVE-2026-22359

CVE-2026-22359 is a CSRF vulnerability affecting the WordPress plugin WordPress Movies Bulk Importer (plugin slug: movies-importer) with vulnerable range from n/a through version

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:56 p.m.•8 views

CVE-2026-22359 WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

5.8AI score0.00153EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:56 p.m.•8 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.2AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:56 p.m.•32 views

CVE-2026-22359 WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS0.00153EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•28 views

PT-2026-4211

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

5.4AI score0.00153EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•3 views

CVE-2026-22359: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/20 4:30 p.m.•18 views

EUVD-2025-206300

Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted...

6CVSS5.4AI score0.00242EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•19 views

PT-2026-3490

Name of the Vulnerable Software and Affected Versions Wings versions 1.7.0 through 1.11.9 Description Wings, the server control plane for Pterodactyl, is affected by an issue where it does not account for SQLite’s maximum parameter limit when handling activity log entries. This allows a...

8.3CVSS5.4AI score0.0054EPSS
SaveExploits1
OSV
OSV
•added 2026/01/16 8:42 a.m.•19 views

BIT-KIBANA-2026-0531 Allocation of Resources Without Limits or Throttling in Kibana Fleet

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted bulk retrieval request. This requires an attacker to have low-level privileges equivalent to the viewer role, which grants read access to agent policies...

6.5CVSS5.9AI score0.00488EPSS
SaveExploits0References2
Rows per page
Query Builder