Lucene search
+L

3392 matches found

NVD
NVD
•added 2024/12/13 3:15 p.m.•16 views

CVE-2023-41688

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...

5.4CVSS0.00567EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:24 p.m.•12 views

CVE-2024-54236 WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS8.6AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:24 p.m.•30 views

CVE-2023-41688 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...

5.4CVSS0.00567EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•2 views

PT-2024-36114

Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Bulk Product Editor versions 1.4.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations...

7.1CVSS0.00436EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin Ni WooCommerce Bulk Product Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•7 views

CVE-2023-41688: Missing Authorization

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...

5.4CVSS5.9AI score0.00567EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•6 views

CVE-2024-54236: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•18 views

PT-2024-12956 · Mad Fish Digital · Bulk Noindex & Nofollow Toolkit

Name of the Vulnerable Software and Affected Versions: Mad Fish Digital Bulk NoIndex & NoFollow Toolkit versions 1.42 and earlier Bulk NoIndex & NoFollow Toolkit plugin version 1.42 Description: The issue affects the Bulk NoIndex & NoFollow Toolkit plugin due to a Missing Authorization...

5.4CVSS9.6AI score0.00567EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2024/12/12 5:54 p.m.•13 views

WordPress Seraphinite Bulk Discounts for WooCommerce plugin <= 2.4.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Seraphinite Bulk Discounts for WooCommerce versions = 2.4.6...

6.1CVSS6.3AI score0.00391EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/12/12 8:22 a.m.•64 views

CVE-2024-12160

CVE-2024-12160 affects the Seraphinite Bulk Discounts for WooCommerce plugin (WordPress). The issue is a reflected Cross-Site Scripting vulnerability caused by using add_query_arg without proper escaping in the URL for all versions up to 2.4.6. This allows unauthenticated attackers to inject arbi...

6.1CVSS6AI score0.00391EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/12 8:22 a.m.•12 views

CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.4AI score0.00391EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/12 8:22 a.m.•39 views

CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00391EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

WordPress plugin Seraphinite Bulk Discounts for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.8AI score0.00391EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•7 views

CVE-2024-12160: Improper Neutralization of Input During Web Page Generation

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00391EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•21 views

CVE-2023-49754

Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through = 5.0.0...

4.3CVSS0.00407EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•23 views

CVE-2023-49754 WordPress Bulk Edit Post Titles plugin <= 5.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through = 5.0.0...

4.3CVSS8.5AI score0.00407EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•36 views

PT-2024-13791 · Unknown · Bulk Edit Post Titles

Name of the Vulnerable Software and Affected Versions: Bulk Edit Post Titles versions through 5.0.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.0....

4.3CVSS9.4AI score0.00407EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•18 views

WordPress plugin Bulk Edit Post Titles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

4.3CVSS8.7AI score0.00407EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2023-49754: Missing Authorization

Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through = 5.0.0...

4.3CVSS5.9AI score0.00407EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/05 9:55 p.m.•10 views

WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ni WooCommerce Bulk Product Editor versions = 1.4.5...

7.1CVSS6.1AI score0.00436EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder