Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.1 views

CVE-2025-49351

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

7.1CVSS6.6AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202041

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

6.1AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:17 p.m.1 views

CVE-2025-49351

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

7.1CVSS0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.16 views

CVE-2025-49351 WordPress Create Posts & Terms plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

7.1CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/09 2:52 p.m.1 views

CVE-2025-49351

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

7.1CVSS5.1AI score0.00015EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.1 views

CVE-2025-49351 WordPress Create Posts & Terms plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

7.1CVSS6.3AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.4 views

CVE-2025-49351

CVE-2025-49351 is a CSRF vulnerability in the WordPress plugin Create Posts & Terms (plugin slug: create-posts-terms), affecting versions up to and including 1.3.1. The connected documents specify that the flaw allows Cross-Site Request Forgery which can lead to Stored XSS. Root cause and exact v...

7.1CVSS5.2AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-49986

Cross-Site Request Forgery CSRF vulnerability in Valentin Agachi Create Posts & Terms create-posts-terms allows Stored XSS.This issue affects Create Posts & Terms: from n/a through = 1.3.1...

6.6AI score0.00015EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

WordPress plugin Create Posts Terms 跨站请求伪造漏洞

...

7.1CVSS5.8AI score0.00015EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/27 4:11 p.m.3 views

WordPress Create Posts & Terms plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Create Posts & Terms versions = 1.3.1...

7.1CVSS7AI score0.00015EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-32238

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00209EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/01 12:0 a.m.2 views

PT-2024-29293 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.9.x through 9.9.0 Mattermost versions 9.5.x through 9.5.6 Mattermost versions 9.7.x through 9.7.5 Mattermost versions 9.8.x through 9.8.1 Description: The issue arises from the failure to properly validate synced posts...

7.1CVSS7AI score0.00092EPSS
Exploits0References11
OSV
OSV
added 2020/04/07 5:15 p.m.1 views

CVE-2020-9514

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user with the Subscriber role to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages via...

6.5CVSS6.7AI score0.0025EPSS
Exploits1References2
Prion
Prion
added 2020/04/07 5:15 p.m.8 views

Code injection

An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user with the Subscriber role to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages via...

4CVSS6.5AI score0.0025EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2014/10/03 2:55 p.m.10 views

CVE-2014-6299

Cross-site request forgery CSRF vulnerability in the mmforum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that create posts via unspecified vectors...

6.8CVSS7.1AI score0.00116EPSS
Exploits0References2
Rows per page
Query Builder