Lucene search
+L

3387 matches found

OSV
OSV
•added 2025/03/09 6:15 a.m.•17 views

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.3CVSS7.3AI score0.00169EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/09 6:15 a.m.•24 views

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.3CVSS0.00169EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/09 6:00 a.m.•11 views

CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.7AI score0.00169EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/09 6:00 a.m.•38 views

CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

0.00169EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/09 12:00 a.m.•11 views

CVE-2025-1362: Cross-Site Request Forgery (CSRF)

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.3CVSS5.8AI score0.00169EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/09 12:00 a.m.•5 views

PT-2025-10433

Name of the Vulnerable Software and Affected Versions The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin versions 9.0.2 and earlier Description The issue concerns a lack of CSRF checks in some bulk actions of the plugin, which could allow attackers to make logged-...

4.3CVSS0.00169EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2024-46828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track o...

7.8CVSS5.7AI score0.0025EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•3 views

PT-2025-16735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the PCI: brcmstb component. The issue occurs when the regulator bulk get function returns an error and no regulators are...

7.8CVSS0.0021EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/02/28 2:22 a.m.•24 views

SUSE CVE-2025-21708

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports 1 encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below. For now, enable...

5.5CVSS6.6AI score0.00227EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
•added 2025/02/26 3:33 p.m.•31 views

CVE-2025-27311

Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...

4.3CVSS7.2AI score0.00171EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/25 12:00 a.m.•9 views

Drupal 11.0.x < 11.0.12 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal core doesn't sufficiently filter error messages under certain circumstances, leading to a reflected Cross Site Scripting vulnerability XSS. - Bulk operations allow...

7.5CVSS7.9AI score0.00584EPSS
SaveExploits0References7
NVD
NVD
•added 2025/02/24 3:15 p.m.•16 views

CVE-2025-27311

Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...

4.3CVSS0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/24 3:12 p.m.•13 views

WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bulk Content Creator versions = 1.2.1...

4.3CVSS7AI score0.00171EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/24 2:48 p.m.•10 views

CVE-2025-27311 WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...

4.3CVSS8.5AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/24 2:48 p.m.•75 views

CVE-2025-27311

CVE-2025-27311 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Bulk Content Creator. Affected versions are 1.2.1 and earlier; the issue is active in those releases, per the available data. The CVE details indicate an impact on integrity/availability is not appl...

4.3CVSS7.2AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/24 2:48 p.m.•29 views

CVE-2025-27311 WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...

4.3CVSS0.00171EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/24 12:00 a.m.•14 views

PT-2025-7738 · Unknown · Bulk Content Creator

Name of the Vulnerable Software and Affected Versions: Bulk Content Creator versions 1.2.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions 1.2.1 and earlier, update to a version that includes a fi...

4.3CVSS9.4AI score0.00171EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•5 views

CVE-2025-27311: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in luk3thomas Bulk Content Creator bulk-content-creator allows Cross Site Request Forgery.This issue affects Bulk Content Creator: from n/a through = 1.2.1...

4.3CVSS5.8AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/24 12:00 a.m.•17 views

WordPress plugin Bulk Content Creator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS8.2AI score0.00171EPSS
SaveExploits0References2
osv-drupal
osv-drupal
•added 2025/02/19 4:58 p.m.•18 views

DRUPAL-CORE-2025-002

Bulk operations allow authorized users to modify several nodes at once from the Content page /admin/content. A site builder can also add bulk operations to other pages using Views. A bug in the core Actions system allows some users to modify some fields using bulk actions that they do not have...

4.6CVSS6.6AI score0.00311EPSS
SaveExploits0References1
Rows per page
Query Builder