Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-2109

Malware in sbrugna...

9.6CVSS9.3AI score0.00246EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-34796

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.0036EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/08/30 6:17 p.m.2 views

CVE-2025-48353

Cross-Site Request Forgery CSRF vulnerability in dactum Clickbank WordPress Plugin Niche Storefront clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WordPress Plugin Niche Storefront: from n/a through = 1.3.5...

7.1CVSS5.9AI score0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/08/28 12:37 p.m.12 views

CVE-2025-48353

CVE-2025-48353 : A CSRF to Stored XSS vulnerability exists in the dactum Clickbank WordPress Plugin (Niche Storefront). Affected component: Clickbank WordPress Plugin (Niche Storefront) versions up to and including 1.3.5. Root cause: CSRF enables stored XSS in the plugin; exploitation details are...

7.1CVSS5.9AI score0.00025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.1 views

CVE-2025-48353 WordPress Clickbank WordPress Plugin (Niche Storefront) plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dactum Clickbank WordPress Plugin Niche Storefront allows Stored XSS. This issue affects Clickbank WordPress Plugin Niche Storefront: from n/a through 1.3.5...

7.1CVSS6AI score0.00025EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:29 p.m.6 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS6AI score0.0036EPSS
Exploits0References1
CVE
CVE
added 2024/12/06 8:24 a.m.42 views

CVE-2024-11336

CVE-2024-11336 affects the Clickbank WordPress Plugin (Storefront) for WordPress, version

6.1CVSS6AI score0.00311EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.1 views

WordPress plugin Clickbank 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

6.1CVSS8.3AI score0.00311EPSS
Exploits0References2
NVD
NVD
added 2022/09/06 6:15 p.m.10 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS0.0036EPSS
Exploits0References4
OSV
OSV
added 2022/09/06 6:15 p.m.0 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS5.6AI score0.0036EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2022/09/06 5:18 p.m.5 views

CVE-2022-2542

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS6.1AI score0.0036EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/09/06 5:18 p.m.13 views

CVE-2022-2542 uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting

The uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the /app/sites/ajax/actions/keywordsave.php file that is called via the doAjax function. This make...

8.8CVSS8.1AI score0.0036EPSS
Exploits0References4
Rows per page
Query Builder