Lucene search
K

9 matches found

Cvelist
Cvelist
added 2025/11/13 8:27 a.m.5 views

CVE-2025-11260 WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass

The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.15. This is due to the plugin only checking for the existence of the Authorization header in a request when determining if the nonce protection should be bypasse...

5.3CVSS0.00085EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/13 8:27 a.m.2 views

EUVD-2025-158258

The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.15. This is due to the plugin only checking for the existence of the Authorization header in a request when determining if the nonce protection should be bypasse...

5.3CVSS5.5AI score0.00085EPSS
Exploits0References3
CVE
CVE
added 2025/11/13 8:27 a.m.10 views

CVE-2025-11260

The CVE-2025-11260 entry describes a protection mechanism bypass in the WordPress WP Headless CMS Framework plugin (versions up to and including 1.15). The vulnerability arises because the plugin only checks for the presence of the Authorization header to decide whether to bypass nonce protection...

5.3CVSS5.6AI score0.00085EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.4 views

WordPress plugin WP Headless CMS Framework 安全漏洞

The WordPress WP Headless CMS Framework plugin is a tool for converting WordPress to HeadlessCMS Headless Content Management System, separating content management from front-end presentation via RESTAPI or GraphQL interfaces. The WordPress WP Headless CMS Framework plugin suffers from a protectio...

5.3CVSS6.5AI score0.00085EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.3 views

PT-2025-46791

Name of the Vulnerable Software and Affected Versions WP Headless CMS Framework versions up to and including 1.15 Description The WP Headless CMS Framework plugin for WordPress has a flaw where its protection mechanisms can be bypassed. The plugin only verifies the presence of the Authorization...

5.3CVSS6.5AI score0.00085EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/11/12 11:50 p.m.6 views

WordPress WP Headless CMS Framework plugin <= 1.15 - Unauthenticated Protection Mechanism Bypass vulnerability

Unauthenticated Protection Mechanism Bypass vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin WP Headless CMS Framework versions = 1.15...

5.3CVSS6.7AI score0.00085EPSS
Exploits0References1Affected Software1
myhack58
myhack58
added 2014/10/29 12:0 a.m.12 views

callback nightmare: parsing of the famous CMS frameworks Drupal SQL injection vulnerability-vulnerability warning-the black bar safety net

Drupal is using the PHP language, open source content management framework CMF, which consists of CMS and PHP development framework together constitute. Consecutive years won the world's best CMS award, is based on the PHP language the most famous WEB applications. A few days before the explosion...

0.9AI score
Exploits0
Packet Storm
Packet Storm
added 2009/08/26 12:0 a.m.26 views

Simple CMS FrameWork 1.0 SQL Injection

============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...

0.8AI score
Exploits0
exploitpack
exploitpack
added 2009/08/26 12:0 a.m.14 views

Simple CMS Framework 1.0 - page SQL Injection

Simple CMS Framework 1.0 - page SQL Injection ============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== »...

1.1AI score
Exploits0
Rows per page
Query Builder