Lucene search
+L

592 matches found

Cvelist
Cvelist
added 2023/07/11 7:58 a.m.25 views

CVE-2023-35781 WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LWS Cleaner plugin = 2.3.0 versions...

5.4CVSS9AI score0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/11 7:58 a.m.13 views

CVE-2023-35781 WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LWS Cleaner plugin = 2.3.0 versions...

5.4CVSS7.1AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 7:58 a.m.57 views

CVE-2023-35781

The CVE-2023-35781 entry concerns the WordPress plugin LWS Cleaner, affected versions

8.8CVSS7AI score0.00248EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.9 views

WordPress Plugin LWS Cleaner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00248EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/07/11 12:0 a.m.12 views

LWS Cleaner < 2.3.1 - Cross-Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in LWS Cleaner plugin = 2.3.0 versions...

8.8CVSS6.9AI score0.00248EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.13 views

Sanitize 跨站脚本漏洞

Sanitize is an HTML and CSS cleaner by Ryan Grove, an individual developer in the United States, which supports removing HTML and CSS from strings, among other things. A cross-site scripting vulnerability exists in Sanitize versions prior to 3.0.0 to 6.0.2, which stems from the presence of a...

7.1CVSS6.5AI score0.00712EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/06/16 12:0 a.m.15 views

WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software LWS Cleaner Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-35781 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID eac11e5294d8 Credits konagash Required...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.42 views

WordPress Advanced Database Cleaner Plugin < 3.1.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

6.1CVSS6.4AI score0.00739EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.11 views

WordPress Advanced Database Cleaner Plugin < 3.1.2 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.13 views

WordPress Advanced Database Cleaner Plugin < 3.0.2 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

7.2CVSS7AI score0.01205EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.27 views

WordPress Advanced Database Cleaner Plugin < 3.0.4 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sigmaplugin:advanceddatabasecleaner"; ifdescription...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2023/06/06 12:0 a.m.3 views

PT-2023-4253 · Unknown +2 · Htmlcleaner +2

Name of the Vulnerable Software and Affected Versions: HtmlCleaner versions 2.28 and earlier Description: The issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. It is related to a buffer overflow in memory, which ca...

7.8CVSS8.8AI score0.01048EPSS
SaveExploits1References25
NVD
NVD
added 2023/05/23 3:15 p.m.22 views

CVE-2022-46813

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/23 3:15 p.m.6 views

CVE-2022-46813

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 3:15 p.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/23 2:49 p.m.46 views

CVE-2022-46813

CVE-2022-46813 affects the WordPress plugin Advanced Database Cleaner (versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 2:49 p.m.28 views

CVE-2022-46813 WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

4.3CVSS9.1AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/23 2:49 p.m.9 views

CVE-2022-46813 WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

4.3CVSS7AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.6 views

WordPress plugin Advanced Database Cleaner 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS8.3AI score0.00256EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2023/04/20 8:55 p.m.36 views

Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml

Impact The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1 and massively improved in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid HTML comments. As a consequence, any code relying on this "restricte...

9CVSS6.2AI score0.01277EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder