Lucene search
+L

6 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-27523

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00167EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/12 7:11 a.m.•17 views

CVE-2025-9888

The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due to missing or incorrect nonce validation on the clearlog function. This makes it possible for unauthenticated attackers to clear all spam...

4.3CVSS5.2AI score0.00167EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/12 12:00 a.m.•13 views

WordPress Maspik - Ultimate Spam Protection plugin Cross-Site Request Forgery Vulnerability

WordPress Heateor Maspik - Ultimate Spam Protection plugin is an anti-spam plugin designed specifically for WordPress that protects contact forms, comment areas and signup forms from spam through a variety of technical means. The WordPress Maspik - Ultimate Spam Protection plugin suffers from a...

4.3CVSS6.7AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/10 7:15 a.m.•18 views

CVE-2025-9888

The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due to missing or incorrect nonce validation on the clearlog function. This makes it possible for unauthenticated attackers to clear all spam...

4.3CVSS0.00167EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•1 views

CVE-2025-9888: Cross-Site Request Forgery (CSRF)

The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due to missing or incorrect nonce validation on the clearlog function. This makes it possible for unauthenticated attackers to clear all spam...

4.3CVSS5.5AI score0.00167EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•1 views

CVE-2023-5772: Cross-Site Request Forgery (CSRF)

The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the clearlog function. This makes it possible for unauthenticated attackers to clear the debug log via a forg...

4.3CVSS5.3AI score0.00259EPSS
SaveExploits0References3
Rows per page
Query Builder