Lucene search
K

72 matches found

Nuclei
Nuclei
added 8 hours ago37 views

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS7.8AI score0.8606EPSS
Exploits3References4
CNVD
CNVD
added 2025/12/12 12:0 a.m.1 views

WordPress Chartify plugin cross-site request forgery vulnerability

The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...

8.8CVSS6.9AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 2:22 p.m.1 views

CVE-2025-66529

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS6.9AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202143

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

6.3AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-66529

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.1 views

CVE-2025-66529 WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS6.5AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.5 views

CVE-2025-66529

CVE-2025-66529 concerns the WordPress Chartify plugin (Chartify) with versions

4.3CVSS6.5AI score0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.18 views

CVE-2025-66529 WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

WordPress plugin Chartify 跨站请求伪造漏洞

The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...

4.3CVSS6.8AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49877

CVE-2025-66529 Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3… https://t.co/tisuEjUw4Q...

8.8CVSS6.8AI score0.0003EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/03 7:11 a.m.2 views

WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Doan Dinh Van in WordPress Plugin Chartify versions = 3.6.3...

8.8CVSS7AI score0.0003EPSS
Exploits0Affected Software1
GithubExploit
GithubExploit
added 2025/10/13 7:41 a.m.64 views

Exploit for CVE-2025-11171

CVE-2025-11171: Missing Authentication in Chartify WordPress Plu...

5.3CVSS7.4AI score0.00342EPSS
Exploits3
GithubExploit
GithubExploit
added 2025/10/13 7:41 a.m.205 views

Exploit for CVE-2025-11171

CVE-2025-11171: Missing Authentication in Chartify WordPress P...

5.3CVSS7.2AI score0.00342EPSS
Exploits3
CNVD
CNVD
added 2025/10/13 12:0 a.m.8 views

WordPress Chartify plugin Access Control Error Vulnerability

WordPress Chartify is a plugin for quickly building charts and graphs in your WordPress website, supporting both static and dynamic data visualization, compatible with 22 chart types including line charts, pie charts, bar charts, geographic charts and more. The WordPress Chartify plugin suffers...

5.3CVSS7.1AI score0.00342EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/10/09 6:21 a.m.6 views

CVE-2025-11171

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS6.1AI score0.00342EPSS
Exploits3References1
NVD
NVD
added 2025/10/08 6:15 a.m.6 views

CVE-2025-11171

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS0.00342EPSS
Exploits3References5
Cvelist
Cvelist
added 2025/10/08 5:24 a.m.11 views

CVE-2025-11171 Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS0.00342EPSS
Exploits3References5
CVE
CVE
added 2025/10/08 5:24 a.m.20 views

CVE-2025-11171

CVE-2025-11171 affects the Chartify – WordPress Chart Plugin (up to version 3.5.9). A Missing Authentication for a Critical Function vulnerability arises from an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter without nonce or capability checks. Thi...

5.3CVSS5.8AI score0.00342EPSS
Exploits3References5
Vulnrichment
Vulnrichment
added 2025/10/08 5:24 a.m.5 views

CVE-2025-11171 Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS5.8AI score0.00342EPSS
Exploits3References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.22 views

PT-2025-41227

Name of the Vulnerable Software and Affected Versions Chartify – WordPress Chart Plugin versions prior to 3.5.9 Description The software contains a missing authentication check for a critical function. An unauthenticated AJAX action is registered, dispatching to admin-class methods based on a...

5.3CVSS7AI score0.00342EPSS
Exploits3References10
Rows per page
Query Builder