Lucene search
+L

81 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•70 views

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

9.8CVSS8.5AI score0.04809EPSS
SaveExploits3References4
Kitploit
Kitploit
•added 2026/10/03 1:43 p.m.•15 views

CVE-2024-10571

CVE-2024-10571 Chartify – Plugin de gráficos para WordPress = 2.9.5 - Inclusión de archivos locales no autenticada a través de source Descripción El plugin Chartify – WordPress Chart Plugin para WordPress es vulnerable a Inclusión de Archivos Locales en todas las versiones hasta la 2.9.5 inclusiv...

9.8CVSS8.5AI score0.04809EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/30 5:36 p.m.•16 views

CVE-2025-11171

CVE-2025-11171: Autenticación faltante en el plugin Chartify de WordPress Palabras clave: CVE-2025-11171, vulnerabilidad de Chartify en WordPress, autenticación faltante, seguridad de WordPress, explotación AJAX no autenticada, vulnerabilidad de plugin de WordPress, CWE-306, seguridad de plugin d...

5.3CVSS6.1AI score0.00407EPSS
SaveExploits3References1
CNVD
CNVD
•added 2025/12/12 12:00 a.m.•13 views

WordPress Chartify plugin cross-site request forgery vulnerability

The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...

8.8CVSS6.9AI score0.00163EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 2:22 p.m.•20 views

CVE-2025-66529

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS6.9AI score0.00163EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•14 views

EUVD-2025-202143

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

6.3AI score0.00163EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•16 views

CVE-2025-66529

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:13 p.m.•35 views

CVE-2025-66529 WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:13 p.m.•24 views

CVE-2025-66529

CVE-2025-66529 concerns the WordPress Chartify plugin (Chartify) with versions

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:13 p.m.•5 views

CVE-2025-66529 WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•14 views

WordPress plugin Chartify 跨站请求伪造漏洞

The WordPress Chartify plugin is a tool for quickly building charts and graphs in your WordPress site, designed to simplify the process of data visualization. WordPress Chartify plugin suffers from a cross-site request forgery vulnerability that stems from the WEB application not adequately...

4.3CVSS6.8AI score0.00163EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•2 views

CVE-2025-66529: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3.6.3...

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•16 views

PT-2025-49877

CVE-2025-66529 Cross-Site Request Forgery CSRF vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through = 3… https://t.co/tisuEjUw4Q...

8.8CVSS6.8AI score0.00163EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/12/03 7:11 a.m.•18 views

WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Doan Dinh Van in WordPress Plugin Chartify versions = 3.6.3...

8.8CVSS7AI score0.00163EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
•added 2025/10/13 7:41 a.m.•96 views

Exploit for CVE-2025-11171

CVE-2025-11171: Missing Authentication in Chartify WordPress Plu...

5.3CVSS7.4AI score0.00407EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2025/10/13 7:41 a.m.•292 views

Exploit for CVE-2025-11171

CVE-2025-11171: Missing Authentication in Chartify WordPress P...

5.3CVSS7.2AI score0.00407EPSS
SaveExploits3
CNVD
CNVD
•added 2025/10/13 12:00 a.m.•24 views

WordPress Chartify plugin Access Control Error Vulnerability

WordPress Chartify is a plugin for quickly building charts and graphs in your WordPress website, supporting both static and dynamic data visualization, compatible with 22 chart types including line charts, pie charts, bar charts, geographic charts and more. The WordPress Chartify plugin suffers...

5.3CVSS7.1AI score0.00407EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/10/09 6:21 a.m.•16 views

CVE-2025-11171

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS6.1AI score0.00407EPSS
SaveExploits3References1
NVD
NVD
•added 2025/10/08 6:15 a.m.•23 views

CVE-2025-11171

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

5.3CVSS0.00407EPSS
SaveExploits3References5
CVE
CVE
•added 2025/10/08 5:24 a.m.•51 views

CVE-2025-11171

CVE-2025-11171 affects the Chartify – WordPress Chart Plugin (up to version 3.5.9). A Missing Authentication for a Critical Function vulnerability arises from an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter without nonce or capability checks. Thi...

5.3CVSS6.1AI score0.00407EPSS
SaveExploits3References5
Rows per page
Query Builder