Lucene search
+L

3467 matches found

Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•17 views

PT-2023-9953 · WordPress · Halulu Simple-Download-Button-Shortcode Plugin

Name of the Vulnerable Software and Affected Versions: Halulu simple-download-button-shortcode Plugin version 1.0 Description: A vulnerability has been found in the Halulu simple-download-button-shortcode Plugin on WordPress. The issue affects an unknown function of the file simple-download-butto...

7.5CVSS6.9AI score0.0072EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/10/16 12:00 a.m.•15 views

WordPress Plugin Timely Booking Button Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS5.9AI score0.00374EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/12 3:15 p.m.•31 views

CVE-2023-41131

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS5.9AI score0.00256EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/12 3:15 p.m.•13 views

CVE-2023-41131

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 3:15 p.m.•20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/12 2:26 p.m.•107 views

CVE-2023-41131

CVE-2023-41131 refers to a CSRF vulnerability in the WordPress plugin Sptify Play Button for WordPress (Jonk @ Follow me Darling Sp tify Play Button) affecting versions

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•18 views

WordPress plugin Sp*tify Play Button Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•7 views

CVE-2023-41131: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

8.8CVSS7.8AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•16 views

PT-2023-27815 · WordPress · Jonk @ Follow Me Darling Sp*Tify Play Button

Name of the Vulnerable Software and Affected Versions: Jonk @ Follow me Darling Sptify Play Button for WordPress plugin versions = 2.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performi...

8.8CVSS8.5AI score0.00256EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2023/10/11 12:00 a.m.•11 views

WP Like Button <= 1.7.0 - Button Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its Button settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS6.4AI score0.00252EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•17 views

PT-2023-29530 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.5 MediaWiki versions 1.40.x prior to 1.40.1 Description: An issue was discovered in the Vector Skin component for MediaWiki. The vector-toc-toggle-button-label is not escaped, but should be, because the line...

9.8CVSS6AI score0.23783EPSS
SaveExploits27References128
NVD
NVD
•added 2023/10/03 1:15 p.m.•22 views

CVE-2023-40199

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

8.8CVSS6.5AI score0.00252EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/03 1:15 p.m.•17 views

CVE-2023-40199

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

8.8CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/03 1:15 p.m.•29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

6.8CVSS8.8AI score0.00252EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/03 12:33 p.m.•16 views

CVE-2023-40199 WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

5.4CVSS7.1AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/03 12:33 p.m.•74 views

CVE-2023-40199

CVE-2023-40199 describes a Cross-Site Request Forgery (CSRF) vulnerability in the CRUDLab WP Like Button plugin for WordPress, affecting versions

8.8CVSS7.1AI score0.00252EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/03 12:33 p.m.•32 views

CVE-2023-40199 WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

5.4CVSS9AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/03 12:00 a.m.•18 views

PT-2023-27318 · WordPress · Crudlab Wp Like Button

Name of the Vulnerable Software and Affected Versions: CRUDLab WP Like Button plugin versions = 1.7.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.8AI score0.00252EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•19 views

WordPress Plugin WP Like Button Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/03 12:00 a.m.•9 views

CVE-2023-40199: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CRUDLab WP Like Button plugin = 1.7.0 versions...

8.8CVSS8.2AI score0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder